← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Malware: Cuckoo Behaves Like Cross Between Infostealer and Spyware
WHITE bluenumberone 2024-05-07 Modified: 2024-06-06
31
IOCs
MEDIUM VOLUME
Kandji is a free-to-use device management platform designed to help Apple users manage their Mac devices at scale and keep them safe. Â the same thing as malware.
xorfuncbuiltinstrcpybuiltinstrncpyhomedirectoryopencuckoosnprintfspotify musicuuidstrlenopenaprilvirustotalfirstpersistenceerrormkdirdiscorddesktopsteamarmeniabelarusukrainemacoscorecapturescreencaptureaddendum
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (7 / 31 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 1827db474aa94870aafdd63bdc25d61799c2f405ef94e88432e8e212dfa51ac7 — 2024-05-07
FileHash-SHA256 254663d6f4968b220795e0742284f9a846f995ba66590d97562e8f19049ffd4b — 2024-05-07
FileHash-SHA256 39f1224d7d71100f86651012c87c181a545b0a1606edc49131730f8c5b56bdb7 — 2024-05-07
FileHash-SHA256 702fee1d3836cc14102ec2dfbf1e6706c2e359a8e38403d82789ba7d717cfc77 — 2024-05-07
FileHash-SHA256 7a45639f768144799d608a4bbabf144fc1e3c016a7d665775c6314a0c71540f1 — 2024-05-07
FileHash-SHA256 a709dacc4d741926a7f04cad40a22adfc12dd7406f016dd668dd98725686a2dc — 2024-05-07
FileHash-SHA256 d8c3c7eedd41b35a9a30a99727b9e0b47e652b8f601b58e2c20e2a7d30ce14a8 — 2024-05-07
References (1)
↗ https://blog.kandji.io/malware-cuckoo-infostealer-spyware