f54959ae8f5987d1078b9c63dcac3168acaa56b5192938d60b24015d7da70b71

Sharing

Copy URL Twitter E-mail

General

Target
newbrowser-macos-v1.1.11.zip
Size 37.0MB
Sample261110-1s6djsbf55
SHA256 f54959ae8f5987d1078b9c63dcac3168acaa56b5192938d60b24015d7da70b71
MD5 7aab1c35bc517b186d81a6d0afbb5039
SHA1 205f97c8725ab1cc8e1c6719e698af733fa4505d
SHA512 0dd62ac508926f1b2d77fbdb87622ba9488007c3a6b1a72b879d747c542b010db8ab671b67f301904bcec322e0d587a0dacca216b21a7ff5a67a4148faa438a9
SSDEEP 786432:2Y8T07Ky7Nm97K67KX7KiflL7Kt7NDE7Np7Kd7KH7KHfo:IfyJ9h2iflitJwJ0QmHfo
TLSH
T1FD8723D0B682A9B7FC44F3B64826050967258CB4AB88C3B73D6AC5999FFF1A07D514CC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tcl_data/auto.tcl
- Size 20KB
- SHA256 2a176e7467c15f12198662db68b9deda0726f4f744166c85060b894ce676d055
- MD5 02caa5526fa91319315788b38387a5e5
- SHA1 56d7bd91740759a54d0ae724fd806a124b67ca98
- SHA512 aafb4ee6c71b0d75ad41e9bc57d9d297883ae41a994029e5e692c7b1360dd8136e13fbc3f509b4c46659c1d0302ac1a19aa5391610f347c9e2feb7cf6935d398
- SSDEEP 384:vy8cBWaytAZXTP9nYP9Qq5HU3mT5uhUXBEWoYqpR+7pBtYSbJ0QDVlM:dcBWaytAJTPBYPy13mT5uubqpR+7pYSm
- TLSH
  T1F892A7639FE443B63092C13A186DB9A4AA7FC2BB4665841538FC921C7BD1814C6FF7E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tcl_data/clock.tcl
- Size 125KB
- SHA256 7f27d400b088a0e72adeb48d17059892e95f08a2a03970bd74cdfb35b106618b
- MD5 f6190e0ddea9aba901eef220cdaedad9
- SHA1 0e0c8d0bc7d472bf03226805f211fd7acc0a4593
- SHA512 cadb90ab401966b5b9f6b8087657f227f28a8eae6dddb8b081500e1ac02d9ca8e74c73c8c4205172eb68fb0d5754d8af699cfbfe985b2c37e642ae12b7a32e93
- SSDEEP 3072:7klVEuSDFeEzGtdaui+urVke5i1IsQ5SvtTImhrYnPrzAvtt2eyw7KBH/SOyQasa:BDFeEzMaui+urVke5i1R6SvtTImhrYPG
- TLSH
  T1C4C3A446DF24022EB0A3C13A0D8A95D8EF3DD1BB7799855DBCAE849C3B01D1946BE3D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral3 behavioral4
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tcl_data/http1.0/http.tcl
- Size 9KB
- SHA256 acbff9b5ef75790920b95023156fad80b18aff8cafc4a6dc03893f9388e053a2
- MD5 1da12c32e7e4c040bd9ab2bcbac5445b
- SHA1 8e8659bef065af9430509bbdd5fb4cfe0ef14153
- SHA512 a269c76c1684ec1a2e2aa611abb459aa3be2973fd456737bc8c8d2e5c8bc53a26bbc1488062281ca87e38d548281166c4d775c50c695aec9741fe911bb431ead
- SSDEEP 192:kQkH8VqqNg5PPx7GRpoMJesrCL2coOG0vARQVSDR6VrKj7vWQYQN81QvLbDdv:pVqeglpu6toO3ACUnvv
- TLSH
  T1571286C5A242B0B9BC97833E8E5C90B0EA38A1D361AD8518BC5DC2947F4751ECAFD3D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tcl_data/opt0.4/optparse.tcl
- Size 31KB
- SHA256 895caa15a5fbf9f499bfea6ad65b23f0bd4880426a71c65d95a49a443c9402cd
- MD5 04eea174603354a1a5cab23ca94f964f
- SHA1 6aa616091accf124ce772ddc44d29c41a7b70e4c
- SHA512 f4c2b0a9cc50f8f730fe53315dbb199b75d4ada734f9a5ae569c6736339e3f59bb1b97ab5bac229b99b46781a1c8d8db44fdf042b994cf6a0a06d7fd218b8980
- SSDEEP 768:UWRgq5gzrui4sKDt9C7zGbHMmjJbuQH8A2Q:fg3rrvf7zGbHDFSQH8/Q
- TLSH
  T11DE2B516AF8176ED6993103A0D5D8851BB3DC27362898878FC9C816D3F91A47C6FE3D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral7 behavioral8
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tcl_data/package.tcl
- Size 22KB
- SHA256 c13dcf4d1659a987671290592258b436d26dcfda06125761ef1f040c68698b67
- MD5 37e36a98f740d712565d688d285bb043
- SHA1 7968cb9383248583d3059e3c69e6a5c2cb6f5207
- SHA512 b594d6715916b308acf4ebd03b3178726d107e82d8614e7da82634a52f45663b5118abe50d8619530d494df9573dcfee0fd81624953c1a0527bf75902c712ff1
- SSDEEP 384:I72oQXm9jVLyBLWueSzvAXMiow90lKNhETrh4NLTlcYhoNL3ZAqYi:I72oQXmTyBCqvAcFw2WhOrh4NZDhoN3F
- TLSH
  T14AA20A15E7CC52A6348241765E497D9C0F3DC0FFA1A961BD749882EC7780D2A0AEE7F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10 behavioral9
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tcl_data/safe.tcl
- Size 39KB
- SHA256 c58b6ff351471bab27550198353e105d389ddd22cf39fd18c62335d4c929541d
- MD5 2a5420d1e8b72b865d160a0123d7a39f
- SHA1 319788790298294bc20eaad89cf0c9bd652269b8
- SHA512 d0001ad29348963941c6eb3d8462db2f4f4c15dd60579288fae1617e43940b829ad75180e31c0a95fc2af16e29427cc69aae194394618cdc87b4db3ade6350ec
- SSDEEP 768:Oh5LMX58Y8ZnpHplK3kfzv0Iwtf7bRFnDRoISnSyhvkHSGOMB1hluQpYkA:Oh5LMh8ZzlK3kfzHCnRFnDRoISntvkHw
- TLSH
  T1EE03A606AB8267D9784382355D6FD6A4FA3C80FB42EA44ACB45CE15C3F4141D86BF7D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tcl_data/word.tcl
- Size 4KB
- SHA256 b0592b0e1fd6c3c0e704168d4af97e9d5cab89b5cf5176e19ed5bd5f5eb2a175
- MD5 e4859d81fe1f3514cdb23dc52fccd452
- SHA1 e8122a9db401079a76f58fa6760d2f042492c565
- SHA512 378c90db867f30509fb1a04f4bbbb0bc3d992a4a26bb6e702ba2918e463b015b1c263f267a17055cf7e47d72ac596ad87b13367416018356630c2c4056db7e42
- SSDEEP 96:Le+lfW37GWdh85qWdhAjgr9a+1FeS9D/CkXg6gvF9D/CYjX16AyyrGuA11/JRJ6T:q+lc7GW85qW9a+P39DCd6gt9DC+6AjGk
- TLSH
  T12CA153D2E685232B5FD28019E8DD73B9F60A452F03AF5A21506DF2583B4655F08BF8E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral13 behavioral14
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tk_data/bgerror.tcl
- Size 8KB
- SHA256 64448552e9dd75e84b8df63529e67f96db9351d4913ec2e96fd529fe4c35e05b
- MD5 de7ffff8033b00826374dde1bf97ef0f
- SHA1 4e1c9c4ded5b28871d4c9c163568205206b18a1c
- SHA512 060b6be35c980e6e5480f7b509cf3e271b978ba78c70c4ba750db77d64c14069935e4a6846bed50c4f871efb3ece412e9ac5cf16e792d4fa474da1569967f648
- SSDEEP 192:tKrjbDL5/gnNFirz1DQQ2d4YGpFnIVTBoSrMxZ34qf9GnEF5SpcJV+H//iNx:tIjL5/gU/jcVSxbXKKv
- TLSH
  T19C028402628D2767A55B4036096ED754FB3B80EFA2D5DC8D78BCC0A97F40032DAB67E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral15 behavioral16
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tk_data/choosedir.tcl
- Size 9KB
- SHA256 30ce631cb1cccd20570018162c6ffef31bad378ef5b2de2d982c96e65eb62ef6
- MD5 e703c16058e7f783e9bb4357f81b564d
- SHA1 1eda07870078fc4c3690b54bb5330a722c75aa05
- SHA512 28617f8553766ca7a66f438624afa5fd7780f93dc9ebdf9bee865b5649228aa56a69189218fc436cedf2e5fe3162ad88839cbf49c9cc051238a7559b5c3ba726
- SSDEEP 192:MvjK3vpIKU7JBhpZofNAieYemp8U3wNV97oZQWpopePXUsyWjocIegf6tq9jJKT4:M4viKeBQ+3M3wNwvwsFyoIegf6wO70fN
- TLSH
  T1F3126242728C2336914786724DEEA054BE6EE0EF519CA71C752E80987F52437AFE52E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral17 behavioral18
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tk_data/clrpick.tcl
- Size 20KB
- SHA256 ad764494b6a793d3dc8ef06b982d14f09a1fcef4a599122edbc16487d35c472c
- MD5 098b4f9ddf5a99b5a9fab102f69cf8af
- SHA1 5602bba77e9f1c6998583e86a5086f5db5135b54
- SHA512 9a3d09a4ba48ab2ffa1e6cafa379b0768f2901b5b03864a1670a4624fdd3dce5c763eab3a74bad5cd381fe4870b5495f2f6863d2b44f4967886c42e11659d679
- SSDEEP 384:HDJsgeqJelEu6i1T26UYdTVDyPHxQ6ufbtIeVj8dOqAQBxhKN2zD5Ed9bmqU/FC6:jagJJnBfxQWf9
- TLSH
  T117A25342FF581327E047C17F48A9E144CE6FB0AF32899B48792681587F61027B9EE2F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral19 behavioral20
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tk_data/comdlg.tcl
- Size 8KB
- SHA256 f62ce5b8450ae7b3ec2bdd9fdf67c77fcc99aa18de195de5337c75c997a4b11c
- MD5 39adbb446c161da60233a793171bf3b9
- SHA1 51e2b5bae9194e7b1bbd34cafcaa3d22b5e1c6b7
- SHA512 833c5090a5afbf9881036f92f42a05feb738eb95b0439002d14345a90ca99d7234abb09d60d345dfc22f07cd4e790dc0793bc9e044e869fb079f7166c71329a3
- SSDEEP 192:Afpd7cPy5HEOnbKU8QHyWpSWNRYs50asAZ5QWlO+W0WvHv/3WvWHwV7vWKpTTk:AT7c6HJbKCyWpZNRYEVVET1rvveuHSOT
- TLSH
  T13F029542AF8875A239D3D06A6DCD92A0F7BCE06781F89C157C1C871C7B0189A85FE7E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral21 behavioral22
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tk_data/console.tcl
- Size 31KB
- SHA256 6ea55267462574922d9d980840e303cb7e174bcb6c2d7288f5fe85f55e1e9910
- MD5 65ad7a520431e66fcfcd689f3aa9ace7
- SHA1 a80ee8de30d9d28e994a52f9be8731f2e9456ee6
- SHA512 cab61ab4525fae5405384ae2304889420a0edb1b4c30012acfbdd9025c702456a460edbfbe6c040f9a737be50b4e467a627b63aceeb8587e66c224c3144e251c
- SSDEEP 384:GkptcJaPB5mxjtyU/W1ZQWCr0gIGl5neLLs+weoHuQlLW4qqvRHRJStCO2FfB25b:GkpeYB5mmiJ+kSs+wqYZaGGWFOYoV
- TLSH
  T10CE208275BC43832704290721EEE26A4297FE9E347D1EA4AB8AC561C7FD503386F63D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral23 behavioral24
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tk_data/entry.tcl
- Size 17KB
- SHA256 c150a222d8c6b63a50fe24adc9e0f95d834ba7cce15a670a4ea4737bf9ad9612
- MD5 a7cd7d50021a12366d24187a9249bb52
- SHA1 05029c0b4ed643763a38f9d0991668701ece0e91
- SHA512 c04a609505c90f630cdf8bb3067a2be52af973a9ecb311154cc727e5e11400fe07720b03c58d1c1194fe16101597924dfb68e294b2c9ca9f63fdd7945187fbe2
- SSDEEP 384:PtSeFkH2fR4OIOeQod3tdAERNwMIDlXVQgXwDvi7:PtTFD4nAGA
- TLSH
  T1D88252C62CB65B316187C177D69EF600F776906B22DB4826B5A593503F8903302BE7D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral25 behavioral26
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tk_data/focus.tcl
- Size 4KB
- SHA256 40d4e101a64b75361f763479b01207ae71535337e79ce6e162265842f6471eed
- MD5 7ea007f00bf194722ff144be274c2176
- SHA1 6835a515e85a9e55d5a27073dae1f1a5d7424513
- SHA512 e2520eb065296c431c71dbbd5503709cf61f93e74fe324f4f8f3fe13131d62435b1e124d38e2ec84939b92198a54b8a71dfc0a8d32f0dd94139c54068fbcaaf2
- SSDEEP 96:mumhRUI7F2WyHm6BUyNhEf6jUHKRUI7F2WyQe6L763AcnK0/61sk2ko5AgEplauw:ERUQFU52CNRUQFpLOQIG1sk2TCLplauw
- TLSH
  T141A18621F64523B3B54611A325AFE34DBB7B8476528D98D87CB5C224B302417C3FE6E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral27 behavioral28
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tk_data/fontchooser.tcl
- Size 17KB
- SHA256 070cff67ee801ddf182d98e35712f7c9c1950830c0e3a6ac724157a670a6b7c8
- MD5 e8a229f60b9c1f9ffdef90acb1735c21
- SHA1 709912de255870b5934c6dab68e45183e058ea2d
- SHA512 06ad15115f629a4ce3eaffb53bbd7712bab8fcfa78fd78a959afe1960cfbbef2328a646f88143e7c9ed694f4cac15878eef4ceef6d67f0acf1d11156d1303b8b
- SSDEEP 384:qxZ2mk/guFWrW3gLdJdZw8ZCk/YN5N4Jd/yCgo:qxZ2mk/guFWrW3gLdJ7w8Z/YQJB
- TLSH
  T1D68275032995E9613183C47F58ED51247E3DC09B9288AAA8BCFE824C6F915F661F47F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral29 behavioral30
- Target
  浏览器痕迹分析-v1.1.11-macOS_M芯片新款/浏览器痕迹分析.app/Contents/Frameworks/_tk_data/iconlist.tcl
- Size 16KB
- SHA256 477160c56b7ffb90f027b10c6c6bebeb128f7fa894104608d90d9b55f2a7e1b4
- MD5 c0b5726a390d2773a5bb631acc73df91
- SHA1 5e06df49ea77a79163cc0640cfada9026c322cb6
- SHA512 7c2401f6e42b779923daf2d9d55b2eadcb7509ffd46f56b2b2804dc18f186e001b9ae3939f174fb716f3447bbc0724b05f2b6a7d20dbb7f7b155c647c4895af9
- SSDEEP 384:xrjJE36a7BegvV8hFI8gv1hsjZ9HqD/UF:xrBa1egvV8h+8gv1hsfl
- TLSH
  T1F57284467F8491783083E23F1DD6A110EA75C1A7C8C9CD5F7C299164BB2422B86FE1EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32