Overview

overview

1

Static

static

RecentNews....h.vbs

macos_amd64

1

RecentNews...ler.py

macos_amd64

1

RecentNews...st.xml

macos_amd64

1

RecentNews...taller

macos_amd64

1

RecentNews...python

macos_amd64

1

RecentNews...bsc/mt

macos_amd64

1

RecentNews...er.pyc

macos_amd64

1

RecentNews...ner.sh

macos_amd64

1

RecentNews...le.pdf

macos_amd64

1

RecentNews...t__.py

macos_amd64

1

RecentNews...r__.sh

macos_amd64

1

RecentNews...all-sh

macos_amd64

1

RecentNews...n2.7.a

macos_amd64

1

RecentNews....dylib

macos_amd64

1

RecentNews...thon.o

macos_amd64

1

RecentNews...te.pyc

macos_amd64

1

RecentNews...te.pyc

macos_amd64

1

pkg_resources.pyc

macos_amd64

1

Resubmissions

08-11-2021 08:45

211108-knqjjabfa3 1

08-11-2021 08:40

211108-kk3dxsbeh8 1

Analysis

  • max time network
    105s
  • platform
    macos_amd64
  • resource
    macos
  • submitted
    08-11-2021 08:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    RecentNews.?fdp.app/Contents/Resources/include/python2.7/descrobject.h.vbs

  • Size

    2KB

  • MD5

    1783238e6d204ce471f31e83bdcfcf5b

  • SHA1

    47e8c5090b287fd633897c6aaa90abe2c40d4a77

  • SHA256

    5c4575c44abcf6eb4ed592960b658d4e300c91c1c3113122ef4e9dd7e35b913e

  • SHA512

    be0469d71f09ed1e3597909cac35754ce93a9eb1f27788eae5192618d683b87963e3a51f2b1f9a1bbcd8dab2a7a341dae23655502b036ef517acc40b5bf613a5

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /Users/run/RecentNews.?fdp.app/Contents/Resources/include/python2.7/descrobject.h.vb"
    1⤵
      PID:486
    • /bin/bash
      sh -c "sudo /Users/run/RecentNews.?fdp.app/Contents/Resources/include/python2.7/descrobject.h.vb"
      1⤵
        PID:486
      • /usr/bin/sudo
        sudo "/Users/run/RecentNews.?fdp.app/Contents/Resources/include/python2.7/descrobject.h.vb"
        1⤵
          PID:486

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /private/var/db/sudo/ts/run
          MD5

          985e9db8d48185806c1646bee1f3a4bd

          SHA1

          2d4c0104f9dbd2e870d281910496d7d09da9100a

          SHA256

          05a416d30b930844e173403bd78cb7c5ee5dea2c9ec771ef374a850a225725aa

          SHA512

          bb2de798fb06772001893f65cbcdfdca2828d9fa339bf6edaae04c798330dfc7b849a0d58e8745961559c3fba83dceac5c37a5447c0265f883d4be53589de7c9

          Download Submit