General
- Target Xomira
- Size 792KB
- Sample261029-w3prbsdz5v
- SHA256 076bb1a3e58a155d402074aa4408b62c6231941ac7fc913b4b727bd8ab149488
- MD5 b379d6e26430df9c17989d4e1f82bab6
- SHA1 6391c29357e68e23fe80a15e7fa6240d2fada466
- SHA512 24fbbf00a46552d981977f8b1c1ff1d4d51ca0ab518888d56d8a2862383905d93d8d2925d520ab85fe9971e12b9a3f8c07e668a5e55793926f6efcd51b0f1fb4
- SSDEEP 12288:ijp0QoUrfLPg7dMqUaAhooQeEqef8qfBmPunkT2PG:8pkGtEFf8Lu1G
- TLSH T1090517173379540ADC1A71387F926DB6FA20B5B66320E89B5E0B1210DFF50789B1A27F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Xomira
Resource
macos-20260915-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Xomira
- Size 792KB
- SHA256 076bb1a3e58a155d402074aa4408b62c6231941ac7fc913b4b727bd8ab149488
- MD5 b379d6e26430df9c17989d4e1f82bab6
- SHA1 6391c29357e68e23fe80a15e7fa6240d2fada466
- SHA512 24fbbf00a46552d981977f8b1c1ff1d4d51ca0ab518888d56d8a2862383905d93d8d2925d520ab85fe9971e12b9a3f8c07e668a5e55793926f6efcd51b0f1fb4
- SSDEEP 12288:ijp0QoUrfLPg7dMqUaAhooQeEqef8qfBmPunkT2PG:8pkGtEFf8Lu1G
- TLSH T1090517173379540ADC1A71387F926DB6FA20B5B66320E89B5E0B1210DFF50789B1A27F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Identifies hardware specifics through system_profiler
-
Prompts the user for their password using a hidden input dialog
Adversaries may mimic a system prompt to capture a user's password through a GUI dialog with masked input.