The Dangers of a Fake macOS CryptoWallet Keylogger
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Applescript - T1059.002 Domains - T1583.001 Domains - T1584.001 Keylogging - T1056.001 Keylogging - T1417.001 Login Items - T1547.015 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Software - T1592.002 Vulnerabilities - T1588.006 Applescript - T1155
Show in Graph
Common Information
Type Value
UUID c2116110-0e46-4086-9055-dd2380fe4f9f
Fingerprint 27d09cb7ef3786c9
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 27, 2018, midnight
Added to db Jan. 18, 2023, 11:41 p.m.
Last updated Oct. 15, 2024, 10:09 p.m.
Headline The Dangers of a Fake macOS CryptoWallet Keylogger
Title The Dangers of a Fake macOS CryptoWallet Keylogger
Detected Hints/Tags/Attributes 45/2/23
Source URLs
Redirection Url
Details Source https://www.sentinelone.com/blog/macos-spyware-dangers-fake-cryptowallet-keylogger/
URL Provider
Details Provider Source level domain
Details sentinelone.com www.sentinelone.com
Attributes
Details Type #Events CTI Value
Details Domain 2 
launchpad.app
Details Domain 1 
macbook.app
Details Domain 1 
taxviewer.app
Details Domain 1 
picupdater.app
Details Domain 1 
hitbtc-listing-offer.app
Details Domain 1 
ksysconfig.app
Details Domain 1 
sslist.data
Details Domain 1 
realtime-spy.com
Details Domain 1 
rsysconfig.app
Details Domain 1 
exodus-macos-1.64.1-update.app
Details File 1 
skey1.log
Details File 1 
skey2.log
Details File 1 
kspf.dat
Details File 1 
ksa.dat
Details File 1 
sslist.dat
Details File 13 
keys.dat
Details sha256 1 
ae2390d8f49084ab514a5d2d8c5fd2b15a8b8dbfc65920d8362fe84fbe7ed8dd
Details sha256 1 
251d8ce55daff9a9233bc5c18ae6d9ccc99223ba4bf5ea1ae9bf5dcc44137bbd
Details sha256 1 
123c0447d0a755723025344d6263856eaf3f4be790f5cda8754cdbb36ac52b98
Details sha256 1 
987fd09af8096bce5bb8e662bdf2dd6a9dec32c6e6d238edfeba662dd8a998fc
Details sha256 1 
b1da51b6776857166562fa4abdf9ded23d2bdd2cf09cb34761529dfce327f2ec
Details sha256 1 
2ec250a5ec1949e5bb7979f0f425586a2ddc81c8da93e56158126cae8db81fd1
Details sha256 1 
afe2ca5defb341b1cebed6d7c2006922eba39f0a58484fc926905695eda02c88