I can be Apple, and so can you
Tags
attack-pattern: Code Signing - T1553.002 Powershell - T1059.001 Python - T1059.006 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Code Signing - T1116 Powershell - T1086 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID 8ed237a9-d12b-44b5-ad53-3fbeb5c710dc
Fingerprint a568999c0f375324
Analysis status DONE
Considered CTI value 2
Text language
Published June 12, 2018, midnight
Added to db Feb. 18, 2023, 2:21 a.m.
Last updated Oct. 16, 2024, 1:15 a.m.
Headline I can be Apple, and so can you
Title I can be Apple, and so can you
Detected Hints/Tags/Attributes 37/1/17
Source URLs
Redirection Url
Details Source https://sec.okta.com/articles/2018/06/issues-around-third-party-apple-code-signing-checks/
Details Source https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/
URL Provider
Details Provider Source level domain
Details okta.com www.okta.com
Details okta.com sec.okta.com
Attributes
Details Type #Events CTI Value
Details CVE 2 
cve-2018-10408
Details CVE 1 
cve-2018-10405
Details CVE 2 
cve-2018-6336
Details CVE 2 
cve-2018-10470
Details CVE 2 
cve-2018-10403
Details CVE 1 
cve-2018-10404
Details CVE 1 
cve-2018-10406
Details CVE 2 
cve-2018-10407
Details Domain 19 
terminal.app
Details Domain 1 
terminal.app.zip
Details File 17 
app.zip
Details File 1 
santa.log
Details sha256 1 
5daba6c40be028d2139d1c7246f7ea2d86adedf44daf05f7be47307ebc6a572e
Details sha256 1 
67884b18faa1225903a3cc0a5ec6acc8b73b2b0d61d0935eb6510de11abd0cc7
Details sha256 1 
9dc5b06c50a2566de5fc695f1d18fc2c5efb273fd4e957db68708c052f805751
Details sha256 1 
9b33dc17555663b378fe7ea698be0cb857fc739c23fc6a46b39617228b04c0cc
Details sha256 1 
daa81c2858d58a071fe7a8cad2afc95e67d4271fd1149e997ff0cb5132300699