Overview

overview

1

Static

static

RecentNews....h.vbs

macos_amd64

1

RecentNews...ler.py

macos_amd64

1

RecentNews...st.xml

macos_amd64

1

RecentNews...taller

macos_amd64

1

RecentNews...python

macos_amd64

1

RecentNews...bsc/mt

macos_amd64

1

RecentNews...er.pyc

macos_amd64

1

RecentNews...ner.sh

macos_amd64

1

RecentNews...le.pdf

macos_amd64

1

RecentNews...t__.py

macos_amd64

1

RecentNews...r__.sh

macos_amd64

1

RecentNews...all-sh

macos_amd64

1

RecentNews...n2.7.a

macos_amd64

1

RecentNews....dylib

macos_amd64

1

RecentNews...thon.o

macos_amd64

1

RecentNews...te.pyc

macos_amd64

1

RecentNews...te.pyc

macos_amd64

1

pkg_resources.pyc

macos_amd64

1

Resubmissions

08-11-2021 08:45

211108-knqjjabfa3 1

08-11-2021 08:40

211108-kk3dxsbeh8 1

Analysis

  • max time network
    120s
  • platform
    macos_amd64
  • resource
    macos
  • submitted
    08-11-2021 08:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    RecentNews.?fdp.app/Contents/MacOS/python

  • Size

    57KB

  • MD5

    ed1bd7f85be2f9973e0c7cacfaa4e426

  • SHA1

    ae79a52d9dc6ab37b8dcfc096faf9882ddd12e8e

  • SHA256

    ccd3b137253b8fa1ee7b6557a7beb99350238584a10ea8dd36aabcb00e9fc642

  • SHA512

    217da6e24e99c33e4983d908bcb37e8c326f2dcff518aa50f19d44aad27d501958167c9c9a28854dcf32f0561f1fb2095bed08b22b696a04372e42c729984acd

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /Users/run/RecentNews.?fdp.app/Contents/MacOS/python"
    1⤵
      PID:490
    • /bin/bash
      sh -c "sudo /Users/run/RecentNews.?fdp.app/Contents/MacOS/python"
      1⤵
        PID:490
      • /usr/bin/sudo
        sudo "/Users/run/RecentNews.?fdp.app/Contents/MacOS/python"
        1⤵
          PID:490
          • /Users/run/RecentNews.?fdp.app/Contents/MacOS/python
            "/Users/run/RecentNews.?fdp.app/Contents/MacOS/python"
            2⤵
              PID:494
            • /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python
              "/Users/run/RecentNews.?fdp.app/Contents/MacOS/python"
              2⤵
                PID:494

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads