Overview

overview

3

Static

static

3

58810457-C...ll.pdf

windows7_x64

1

58810457-C...ll.pdf

windows10_x64

1

58810457-C...ll.pdf

macos_amd64

1

58810457-C...ll.pdf

linux_amd64

Analysis

  • max time kernel
    79s
  • max time network
    125s
  • platform
    macos_amd64
  • resource
    macos
  • submitted
    11-02-2022 11:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf

  • Size

    392KB

  • MD5

    67725a5107d665ee95f5368a560a3174

  • SHA1

    9b1c173636aba3d37a5a71a2807446c33fa5afb6

  • SHA256

    cf0146b898563aa481a8b2b52ec03e179e9c67ca37c53be5ad788bbc3fa56a2f

  • SHA512

    7170882013b32905e1cad27ba29be2e01858beb46150c9d54b14b87d9186e798e09e56ee7b308cc0fd760d344b119dd338279d96e1181a14c88d50c70d84bf15

Score
1/10

Malware Config

Signatures

Processes

  • /usr/sbin/spctl
    /usr/sbin/spctl --test-devid-status
    1⤵
      PID:610
    • /usr/bin/syslog
      /usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
      1⤵
        PID:611
      • /bin/sh
        sh -c "sudo /bin/zsh -c \"/Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf\""
        1⤵
          PID:612
        • /bin/bash
          sh -c "sudo /bin/zsh -c \"/Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf\""
          1⤵
            PID:612
          • /bin/bash
            sh -c "sudo /bin/zsh -c \"/Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf\""
            1⤵
              PID:612
            • /usr/bin/sudo
              sudo /bin/zsh -c /Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf
              1⤵
                PID:612
              • /usr/bin/sudo
                sudo /bin/zsh -c /Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf
                1⤵
                  PID:612
                  • /bin/zsh
                    /bin/zsh -c /Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf
                    2⤵
                      PID:614
                    • /bin/zsh
                      /bin/zsh -c /Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf
                      2⤵
                        PID:614
                      • /Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf
                        /Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf
                        2⤵
                          PID:614
                        • /Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf
                          /Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf
                          2⤵
                            PID:614
                          • /bin/sh
                            sh /Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf
                            2⤵
                              PID:614
                            • /bin/sh
                              sh /Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf
                              2⤵
                                PID:614
                              • /bin/bash
                                sh /Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf
                                2⤵
                                  PID:614
                                • /bin/bash
                                  sh /Users/run/58810457-Cryptography-RSA-Encryption-Algorithm-in-a-Nut-Shell.pdf
                                  2⤵
                                    PID:614
                                • ��vQŏ K0��/6��,l�G
                                  "��vQŏ K0��/6��,l�G"
                                  1⤵
                                    PID:624
                                  • ��vQŏ K0��/6��,l�G
                                    "��vQŏ K0��/6��,l�G"
                                    1⤵
                                      PID:624
                                    • /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java
                                      "/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java" "-Djdk.disableLastUsageTracking=true" "-Djava.awt.headless=true " -cp "/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy.jar" com.sun.deploy.panel.ControlPanel -getSecurityLevel
                                      1⤵
                                        PID:666
                                      • /usr/libexec/xpcproxy
                                        xpcproxy com.apple.sysmond
                                        1⤵
                                          PID:669
                                        • /usr/libexec/sysmond
                                          /usr/libexec/sysmond
                                          1⤵
                                            PID:669
                                          • /usr/libexec/xpcproxy
                                            xpcproxy com.apple.audio.systemsoundserverd
                                            1⤵
                                              PID:671
                                            • /usr/sbin/systemsoundserverd
                                              /usr/sbin/systemsoundserverd
                                              1⤵
                                                PID:671
                                              • /usr/libexec/xpcproxy
                                                xpcproxy com.apple.audio.AudioComponentRegistrar
                                                1⤵
                                                  PID:672
                                                • /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
                                                  /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
                                                  1⤵
                                                    PID:672

                                                  Network

                                                  MITRE ATT&CK Matrix

                                                  Replay Monitor

                                                  Loading Replay Monitor...

                                                  Downloads

                                                  • /Users/run/Library/Application Support/Oracle/Java/Deployment/deployment.properties
                                                    MD5

                                                    780ae71b433ce945de6f8337f6651288

                                                    SHA1

                                                    483bff597f68474967ba66bf3a3688d7f4b18b3f

                                                    SHA256

                                                    8f451ff84c5efea6f70ab8b259eebcf04086555c3e9447b9d8b0f98c14b8265f

                                                    SHA512

                                                    b690984686d04b2975f5b5a53b54c5c3092eb4d6d84818d365654ac60cb7651bab9aa3895e5396b84bdbbe39ebd158021eb710b33e58f296c228107fe8196b63

                                                    Download Submit
                                                  • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/hsperfdata_run/666
                                                    MD5

                                                    30faa35685f2b92ff9d3c38c2928c3e1

                                                    SHA1

                                                    8d07672ae69d4783469bcd5700383fa256135d7c

                                                    SHA256

                                                    564c9b9eb852fcaa01e45fc87162580dc23f85644cc72e946707324469bd8b00

                                                    SHA512

                                                    7e17ba00eb64aeaa18c85335e0cd3e66614570df7d8951a9f73013a1d8d179cc4d9a7959005f2cf7ee1206f9f8e07ecaf50266960e0d3b78cbb4e8202787acc8

                                                    Download Submit
                                                  • /private/var/tmp/sh-thd-2785765928
                                                    MD5

                                                    e5a62a0bc64644c5585ddb64683a92b2

                                                    SHA1

                                                    256aa28604f2984224dfacf11f3c78868bf7a647

                                                    SHA256

                                                    30237e9d970038a5b0ce1956796633bb073c09c4cd2505f2738e3692c259bf2a

                                                    SHA512

                                                    bcf5c6035bf5b33edae4bea42ebd727b325f92a27e637a2d456aa5318999b56a64dd43ef31d50d1234feb6e7312f37f29d68161001edcab159505c21a6ed3828

                                                    Download Submit
                                                  • /private/var/tmp/sh-thd-2785765928
                                                    MD5

                                                    e5a62a0bc64644c5585ddb64683a92b2

                                                    SHA1

                                                    256aa28604f2984224dfacf11f3c78868bf7a647

                                                    SHA256

                                                    30237e9d970038a5b0ce1956796633bb073c09c4cd2505f2738e3692c259bf2a

                                                    SHA512

                                                    bcf5c6035bf5b33edae4bea42ebd727b325f92a27e637a2d456aa5318999b56a64dd43ef31d50d1234feb6e7312f37f29d68161001edcab159505c21a6ed3828

                                                    Download Submit