Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Malware Families
Excerpt
The AMOS Stealer is a macOS malware known for its data theft capabilities, often delivered via an encrypted osascript (AppleScript) payload. In this blog, I’ll walk you through my process of reverse engineering a Fully Undetected (FUD) AMOS Stealer sample using LLDB, with Binary Ninja (Binja) as a reference for addresses, to extract its decrypted osascript payload. We’ll start with static analysis, identify and bypass the anti-VM logic, discover a partial…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(1)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 3f85a1c1fb6af6f156f29e9c879987459fb5b9f586e50f705260619014591aad | Medium | Score 53/100 | First seen |
| URL | http://95.164.53.3/contact | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…