Overview

overview

1

Static

static

RecentNews....h.vbs

macos_amd64

1

RecentNews...ler.py

macos_amd64

1

RecentNews...st.xml

macos_amd64

1

RecentNews...taller

macos_amd64

1

RecentNews...python

macos_amd64

1

RecentNews...bsc/mt

macos_amd64

1

RecentNews...er.pyc

macos_amd64

1

RecentNews...ner.sh

macos_amd64

1

RecentNews...le.pdf

macos_amd64

1

RecentNews...t__.py

macos_amd64

1

RecentNews...r__.sh

macos_amd64

1

RecentNews...all-sh

macos_amd64

1

RecentNews...n2.7.a

macos_amd64

1

RecentNews....dylib

macos_amd64

1

RecentNews...thon.o

macos_amd64

1

RecentNews...te.pyc

macos_amd64

1

RecentNews...te.pyc

macos_amd64

pkg_resources.pyc

macos_amd64

1

Resubmissions

08-11-2021 08:45

211108-knqjjabfa3 1

08-11-2021 08:40

211108-kk3dxsbeh8 1

Analysis

  • max time network
    151s
  • platform
    macos_amd64
  • resource
    macos
  • submitted
    08-11-2021 08:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    RecentNews.?fdp.app/Contents/Resources/include/python2.7/descrobject.h.vbs

  • Size

    2KB

  • MD5

    1783238e6d204ce471f31e83bdcfcf5b

  • SHA1

    47e8c5090b287fd633897c6aaa90abe2c40d4a77

  • SHA256

    5c4575c44abcf6eb4ed592960b658d4e300c91c1c3113122ef4e9dd7e35b913e

  • SHA512

    be0469d71f09ed1e3597909cac35754ce93a9eb1f27788eae5192618d683b87963e3a51f2b1f9a1bbcd8dab2a7a341dae23655502b036ef517acc40b5bf613a5

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /Users/run/RecentNews.?fdp.app/Contents/Resources/include/python2.7/descrobject.h.vb"
    1⤵
      PID:479
    • /bin/bash
      sh -c "sudo /Users/run/RecentNews.?fdp.app/Contents/Resources/include/python2.7/descrobject.h.vb"
      1⤵
        PID:479
      • /usr/bin/sudo
        sudo "/Users/run/RecentNews.?fdp.app/Contents/Resources/include/python2.7/descrobject.h.vb"
        1⤵
          PID:479

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /private/var/db/sudo/ts/run
          MD5

          eb7dc40a8cebe36147de33576035c387

          SHA1

          e013e9ade37145cd4ad8bbaebcdbc4ac6311f82b

          SHA256

          f8a05d1d3307032bf3a5f1b34c2a3a005016df53f62271ab911064cc958cd684

          SHA512

          a444d6157897c45ed24f6d733773040e393ccf0be47ac8bab2b5e31ddc0a8a2fc84e7d65715de23dc564682524f44e36391752b8bd3c5cf208e5517a66d66745

          Download Submit