Overview

overview

7

Static

static

1

URLScan

urlscan

1

https://nimbus-90.co...

macos-10.15-amd64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://nimbus-90.com/curl/xkjb2rg7jay/8lb2zngeazxusbmw.json
  • Sample261110-v2bbwab17w
Score
7/10
defense_evasiondiscoverymacos

Malware Config

Targets

    • Target
      https://nimbus-90.com/curl/xkjb2rg7jay/8lb2zngeazxusbmw.json
    Score
    7/10
    defense_evasiondiscovery

    • File Permission

      Adversaries may modify file permissions/attributes to evade access control lists (ACLs) and access protected files.

      defense_evasion

    • Queries the macOS version information.

      An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.

      discovery

    • Gatekeeper Bypass

      Adversaries may modify file attributes and subvert Gatekeeper functionality to evade user prompts and execute untrusted programs. Gatekeeper is a set of technologies that act as layer of Apples security model to ensure only trusted applications are executed on a host.

      defense_evasion

    • Uses curl to retrieve or send data

      Curl is a command-line utility used to transfer data to or from a server using various supported network protocols.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks