← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Malware: Cuckoo Behaves Like Cross Between Infostealer and Spyware
WHITE bluenumberone 2024-05-07 Modified: 2024-06-06
31
IOCs
MEDIUM VOLUME
Kandji is a free-to-use device management platform designed to help Apple users manage their Mac devices at scale and keep them safe. Â the same thing as malware.
xorfuncbuiltinstrcpybuiltinstrncpyhomedirectoryopencuckoosnprintfspotify musicuuidstrlenopenaprilvirustotalfirstpersistenceerrormkdirdiscorddesktopsteamarmeniabelarusukrainemacoscorecapturescreencaptureaddendum
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (31)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 0b3880f945a305f9bbb4aa2f6acaabf6 MD5 of 254663d6f4968b220795e0742284f9a846f995ba66590d97562e8f19049ffd4b 2024-05-07
FileHash-MD5 116215690d7a5bdffe0ac911a36fb765 MD5 of a709dacc4d741926a7f04cad40a22adfc12dd7406f016dd668dd98725686a2dc 2024-05-07
FileHash-MD5 269b193738b0eca54147338211719478 MD5 of d8c3c7eedd41b35a9a30a99727b9e0b47e652b8f601b58e2c20e2a7d30ce14a8 2024-05-07
FileHash-MD5 ad0dc84634906434e571681d901056d3 MD5 of 39f1224d7d71100f86651012c87c181a545b0a1606edc49131730f8c5b56bdb7 2024-05-07
FileHash-MD5 d66c04ef314b3a43f011f681324b256c MD5 of 1827db474aa94870aafdd63bdc25d61799c2f405ef94e88432e8e212dfa51ac7 2024-05-07
FileHash-SHA1 1ef1f94d39931b6e625167b021a718f3cfe6bb80 SHA1 of d8c3c7eedd41b35a9a30a99727b9e0b47e652b8f601b58e2c20e2a7d30ce14a8 2024-05-07
FileHash-SHA1 2cdda89c50c2aa1eb4b828350b7086748c58fe08 SHA1 of 39f1224d7d71100f86651012c87c181a545b0a1606edc49131730f8c5b56bdb7 2024-05-07
FileHash-SHA1 696343119e0a0686072f6a31d0edb29a5b8fd116 — 2024-05-07
FileHash-SHA1 7a45639f768144799d608a4bbabf144fc1e3c016 — 2024-05-07
FileHash-SHA1 a700b0759351fd912cf8155579ea21f21437f075 SHA1 of 254663d6f4968b220795e0742284f9a846f995ba66590d97562e8f19049ffd4b 2024-05-07
FileHash-SHA1 c5c8335ed343d14d2150a9ba90e182ca739bde8a SHA1 of 1827db474aa94870aafdd63bdc25d61799c2f405ef94e88432e8e212dfa51ac7 2024-05-07
FileHash-SHA1 e9180ee202c42e2b94689c7e3fb2532dd5179fad SHA1 of a709dacc4d741926a7f04cad40a22adfc12dd7406f016dd668dd98725686a2dc 2024-05-07
FileHash-SHA256 1827db474aa94870aafdd63bdc25d61799c2f405ef94e88432e8e212dfa51ac7 — 2024-05-07
FileHash-SHA256 254663d6f4968b220795e0742284f9a846f995ba66590d97562e8f19049ffd4b — 2024-05-07
FileHash-SHA256 39f1224d7d71100f86651012c87c181a545b0a1606edc49131730f8c5b56bdb7 — 2024-05-07
FileHash-SHA256 702fee1d3836cc14102ec2dfbf1e6706c2e359a8e38403d82789ba7d717cfc77 — 2024-05-07
FileHash-SHA256 7a45639f768144799d608a4bbabf144fc1e3c016a7d665775c6314a0c71540f1 — 2024-05-07
FileHash-SHA256 a709dacc4d741926a7f04cad40a22adfc12dd7406f016dd668dd98725686a2dc — 2024-05-07
FileHash-SHA256 d8c3c7eedd41b35a9a30a99727b9e0b47e652b8f601b58e2c20e2a7d30ce14a8 — 2024-05-07
URL http://146.70.80.123/index.php — 2024-05-07
URL http://146.70.80.123/static.php — 2024-05-07
URL http://dumpmedia.com — 2024-05-07
URL http://fonedog.com — 2024-05-07
URL http://tunefab.com — 2024-05-07
URL http://tunesfun.com — 2024-05-07
URL http://tunesolo.com — 2024-05-07
domain dumpmedia.com — 2024-05-07
domain fonedog.com — 2024-05-07
domain tunefab.com — 2024-05-07
domain tunesfun.com — 2024-05-07
domain tunesolo.com — 2024-05-07
References (1)
↗ https://blog.kandji.io/malware-cuckoo-infostealer-spyware