MacStealer: New Command and Control (C2) Malware Identified
Tags
| attack-pattern: | Data Credentials - T1589.001 Keychain - T1634.001 Keychain - T1555.001 Keychain - T1579 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Keychain - T1142 |
Common Information
| Type | Value |
|---|---|
| UUID | b6093dab-5a1b-4ba5-8c6b-5063f4f8296b |
| Fingerprint | 863c19cacbf28687 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | March 24, 2023, midnight |
| Added to db | March 24, 2023, 8:57 p.m. |
| Last updated | Oct. 16, 2024, 2:44 a.m. |
| Headline | MacStealer: New Command and Control (C2) Malware Identified |
| Title | MacStealer: New Command and Control (C2) Malware Identified |
| Detected Hints/Tags/Attributes | 31/1/24 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://www.uptycs.com/blog/macstealer-command-and-control-c2-malware |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 389 | ✔ | Uptycs Blog | https://www.uptycs.com/blog/rss.xml | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 6 | mac.cracked23.site |
|
| Details | File | 5 | weed.dmg |
|
| Details | sha256 | 2 | 9b17aee4c8a5c6e069fbb123578410c0a7f44b438a4c988be2b65ab4296cff5e |
|
| Details | sha256 | 2 | 6a4f8b65a568a779801b72bce215036bea298e2c08ec54906bb3ebbe5c16c712 |
|
| Details | sha256 | 2 | e51416f12f8c60e7593bef8b9fc55e04990aa047ad7e8abc22b511e7eb7586f6 |
|
| Details | sha256 | 2 | 1b5ef101ac0b3c0c98874546ec4277e6a926c36733ab824cece9212373559818 |
|
| Details | sha256 | 2 | f14dd83e60b8ca6d52e667ed85adafa9b849df33e428b005b05b7c6732de526a |
|
| Details | sha256 | 2 | 977cf1a74467e72b7fd9434bebd9e171a45b520ade960771b31f3bd5e9e4a5aa |
|
| Details | sha256 | 2 | 5031aa79912fb23bcbe2209e015974fccb4b9e9334a9e8801833f07bd3a5ccfc |
|
| Details | sha256 | 2 | 15d1afca780e2ea6ffec8c4862a3401e003b5e79ce5f9076b4eea4ab599bc4ce |
|
| Details | sha256 | 2 | 821ecdae151ed78eb4792d40a7787127927900a763f3249b31f37d7b67b5e1e5 |
|
| Details | sha256 | 2 | df71b5c99052b63de167f9c22b3cf6ded513ed6d1e1c74eff7af8cf9e4692714 |
|
| Details | sha256 | 2 | 1153fca0b395b3f219a6ec7ecfc33f522e7b8fc6676ecb1e40d1827f43ad22be |
|
| Details | sha256 | 2 | e01eec798a326a1e0beb767cdd0f185e19361871de82e23568042e9fc6128bb6 |
|
| Details | sha256 | 2 | acef9f3f215335462e2e2e4bacbe6c52e48e764e7174fe46966e29902f6a1890 |
|
| Details | sha256 | 2 | d61666b49ef700cbd59c744bf5fca2e850be55a52f415102cf3ea1c1c2db18d4 |
|
| Details | sha256 | 2 | 2abc380ad22c47db0035df1f0e6e00a7fabcb5d4afd913e2474478ea11ea6a63 |
|
| Details | sha256 | 2 | 7eed5a8f486aaba3948307f165a636df83857ab6cea21b8fd5e0ff758bb134b3 |
|
| Details | sha256 | 2 | 61f3cd0a7c8191745080aa7b2e0695c3a57327f1f226d9fc7a4be3cee14a2375 |
|
| Details | sha256 | 2 | 1b0684ab02071f8bb03967866596efcea92a48e49f8b1013a6301653f7687e74 |
|
| Details | IPv4 | 2 | 89.116.236.26 |
|
| Details | Url | 3 | http://mac.cracked23.site/uploadlog |
|
| Details | Url | 3 | https://t.me/macos_stealer_2023 |
|
| Details | Url | 3 | https://t.me/macos_logsbot |