Pulse Detail — Threat Intelligence

PULSE NAME

Atomic macOS Stealer (AMOS): Evolving Tactics Targeting Enterprise Apple Users

WHITE Abinsiby12345 2025-09-09 Modified: 2025-09-09

IOCs

MEDIUM VOLUME

↓ CSV ↓ JSON

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1140

Indicators of Compromise (27)

All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-MD5	25e1c385a14ad06e2707dfee3bf2c484	MD5 of dcd1af8febaa4d93c9aa3cc0a7f7caa80f750d24	2025-09-09
FileHash-MD5	36e00e2de5278629464d9ff1215e1eeb	MD5 of 3782f677ca4eea1c733c967c59d63024aa8b4419	2025-09-09
FileHash-MD5	904d94c8674127160a73251e724090fd	MD5 of d47867a22fbc14d03d3fe9fced3a9b5bf8d7c96e	2025-09-09
FileHash-SHA1	3782f677ca4eea1c733c967c59d63024aa8b4419	—	2025-09-09
FileHash-SHA1	d47867a22fbc14d03d3fe9fced3a9b5bf8d7c96e	—	2025-09-09
FileHash-SHA1	dcd1af8febaa4d93c9aa3cc0a7f7caa80f750d24	—	2025-09-09
FileHash-SHA256	3ecf98f90cb170475eef315dad43e125b14757d7fbfdd213d5221c4e31467ee9	SHA256 of 3782f677ca4eea1c733c967c59d63024aa8b4419	2025-09-09
FileHash-SHA256	4a33e10c87795e93c10de3d1a59937909d0093cac937e2a09d3242e7b17a36ce	SHA256 of dcd1af8febaa4d93c9aa3cc0a7f7caa80f750d24	2025-09-09
FileHash-SHA256	7a66c1a25b7caee9b6cc26a3199182379b6cdecc8196ac08be9fe03b4d193d6a	SHA256 of d47867a22fbc14d03d3fe9fced3a9b5bf8d7c96e	2025-09-09
URL	https://goatramz.com/get4/install.sh	—	2025-09-09
URL	https://goatramz.com/get4/update	—	2025-09-09
URL	https://letrucvert.com/get8/install.sh	—	2025-09-09
URL	https://sivvino.com/	b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793	2025-09-09
domain	dtxxbz1jq070725p93.cfd	—	2025-09-09
domain	ekochist.com	—	2025-09-09
domain	goatramz.com	—	2025-09-09
domain	goipbp9080425d4.cfd	—	2025-09-09
domain	halesmp.com	—	2025-09-09
domain	haxmac.cc	—	2025-09-09
domain	im9ov070725iqu.com	—	2025-09-09
domain	jey90080425s.cfd	—	2025-09-09
domain	letrucvert.com	—	2025-09-09
domain	misshon.com	—	2025-09-09
domain	riv4d3dsr17042596.com	—	2025-09-09
domain	sivvino.com	—	2025-09-09
domain	toutentris.com	—	2025-09-09
domain	x5vw0y8h70804254.cfd	—	2025-09-09