Analysis
-
max time kernel
159s -
max time network
262s -
platform
macos_amd64 -
resource
macos-20220504-en -
submitted
06-07-2022 15:39
Static task
static1
Behavioral task
behavioral1
Sample
sample
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
sample
Resource
macos-20220504-en
macos_amd64
0 signatures
0 seconds
General
-
Target
sample
-
Size
5B
-
MD5
4842e206e4cfff2954901467ad54169e
-
SHA1
80c9820ff2efe8aa3d361df7011ae6eee35ec4f0
-
SHA256
2acab1228e8935d5dfdd1756b8a19698b6c8b786c90f87993ce9799a67a96e4e
-
SHA512
ff537b1808fcb03cfb52f768fbd7e7bd66baf6a8558ee5b8f2a02f629e021aa88a1df7a8750bae1f04f3b9d86da56f0bdcba2fdbc81d366da6c97eb76ecb6cba
Score
1/10
Malware Config
Signatures
Processes
-
/usr/sbin/spctl/usr/sbin/spctl --status1⤵
-
/usr/sbin/spctl/usr/sbin/spctl --test-devid-status1⤵
-
/usr/bin/syslog/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"1⤵
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/sample\""1⤵
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/sample\""1⤵
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/sample\""1⤵
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/sample1⤵
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/sample1⤵
-
/bin/zsh/bin/zsh -c /Users/run/sample2⤵
-
/bin/zsh/bin/zsh -c /Users/run/sample2⤵
-
/Users/run/sample/Users/run/sample2⤵
-
/Users/run/sample/Users/run/sample2⤵
-
/bin/shsh /Users/run/sample2⤵
-
/bin/shsh /Users/run/sample2⤵
-
/bin/bashsh /Users/run/sample2⤵
-
/bin/bashsh /Users/run/sample2⤵