PULSE NAME
XCSSET Malware Updates with Python 3 to Target macOS Monterey Users
WHITE dekaRituraj 2022-08-24 Modified: 2022-09-23
65
IOCs
HIGH VOLUME
The operators of the XCSSET macOS malware have upped the stakes by making iterative improvements that add support for macOS Monterey by upgrading its source code components to Python 3. "The malware authors have changed from hiding the primary executable in a fake Xcode.app in the initial versions in 2020 to a fake Mail.app in 2021 and now to a fake Notes.app in 2022," SentinelOne researchers Phil Stokes and Dinesh Devadoss said in a report.
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
XCSSET Threat MRT
Indicators of Compromise (10 / 65 total)
All URL FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 067d023d1644f0db809e40224fc199aa MD5 of 2a62d6bcac7b0c5e75f561458e934ec45c77699c 2022-08-24
FileHash-MD5 1ce8099c5bb8fbe715ae7c546c46a526 MD5 of 127b66afa20a1c42e653ee4f4b64cf1ee3ed637d 2022-08-24
FileHash-MD5 4eb559fb770409447c28ff35ea4850f3 MD5 of e4b6c56faa97493dc0f0f7c4fc2196096ef66513 2022-08-24
FileHash-MD5 778f321ff786629fe340e515761807b7 MD5 of f4099a0884d3f1bf5602c8c6ba5265b76d7f4953 2022-08-24
FileHash-MD5 831bb51467a90ef8a1c308d0b64e7ce2 MD5 of bd13d22095d377938c50088e59fa3079143cb0f2 2022-08-24
FileHash-MD5 8a241c3815d83ecfad3633bd5d5fbe5f MD5 of 2a6d37160f21ec13aa6c692a3ca3374db3d35e96 2022-08-24
FileHash-MD5 a1c343f15a5d0be9766af8b22e4ed452 MD5 of 263b243df32be6d9d9878c459d2fc6491342d547 2022-08-24
FileHash-MD5 b10da4c3de468f8d0f2905349f864c60 MD5 of 1396fdbff38b787d14b1135dcdfc367658669637 2022-08-24
FileHash-MD5 db32974a24eacde161bfc43b428c46d7 MD5 of f3a747bf10763d7d8c1cd9ccedd1e25ee195fce3 2022-08-24
FileHash-MD5 fd60b342f8a30116b9f43cbb97ee3be9 MD5 of dde87aefcaf788f770e5e1229db4fe73873e1c36 2022-08-24