Analysis
-
max time kernel
659s -
max time network
967s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
-
submitted
20-08-2022 11:35
General
-
Target
0000837.zip
-
Size
828KB
-
MD5
49deaeb9150e7fddc0b26f58f6c12184
-
SHA1
c1b39db5d68da53311f68c4784fbd13844c6612e
-
SHA256
fade890cc74ce479153b0c0fd56f85cd5f556f59a0db790eef9723314a1c4f3e
-
SHA512
962e23a96e1622cfd3bdb6b36283fb39e3f9639834b4b817d5b6da4d8716d4522eafa9b2b8cdfffcbf40a1618f612cb1454f149c3d88287bddbacf528048263c
Score
1/10
Malware Config
Signatures
Processes
-
/usr/sbin/spctl/usr/sbin/spctl --status1⤵
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/0000837.zip\""1⤵
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/0000837.zip\""1⤵
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/0000837.zip\""1⤵
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/0000837.zip1⤵
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/0000837.zip1⤵
-
/bin/zsh/bin/zsh -c /Users/run/0000837.zip2⤵
-
/bin/zsh/bin/zsh -c /Users/run/0000837.zip2⤵
-
/Users/run/0000837.zip/Users/run/0000837.zip2⤵
-
/Users/run/0000837.zip/Users/run/0000837.zip2⤵
-
/bin/shsh /Users/run/0000837.zip2⤵
-
/bin/shsh /Users/run/0000837.zip2⤵
-
/bin/bashsh /Users/run/0000837.zip2⤵
-
/bin/bashsh /Users/run/0000837.zip2⤵
-
�s[� _AI� �%9�}r��f٤JtB9]�q I � ʲ��Xr��o �k��� �k�����0b �� �װIy�������ݿt�5 _KA�EL&G �.�����?�|� M/�v� \��X��ݡR� �Zb�/:�YC�����&�d�2k*��t}��;JY \f�W��T�/ ��|o���_^��� ��DAp���߅tN��v�]���i�"�s[� _AI� �%9�}r��f٤JtB9]�q I � ʲ��Xr��o �k��� �k�����0b �� �װIy�������ݿt�5 _KA�EL&G �.�����?�|� M/�v� \\��X��ݡR� �Zb�/:�YC�����&�d�2k*��t}��;JY \\f�W��T�/ ��|o���_^��� ��DAp���߅tN��v�]���i�"3⤵
-
�s[� _AI� �%9�}r��f٤JtB9]�q I � ʲ��Xr��o �k��� �k�����0b �� �װIy�������ݿt�5 _KA�EL&G �.�����?�|� M/�v� \��X��ݡR� �Zb�/:�YC�����&�d�2k*��t}��;JY \f�W��T�/ ��|o���_^��� ��DAp���߅tN��v�]���i�"�s[� _AI� �%9�}r��f٤JtB9]�q I � ʲ��Xr��o �k��� �k�����0b �� �װIy�������ݿt�5 _KA�EL&G �.�����?�|� M/�v� \\��X��ݡR� �Zb�/:�YC�����&�d�2k*��t}��;JY \\f�W��T�/ ��|o���_^��� ��DAp���߅tN��v�]���i�"3⤵
-
/usr/sbin/spctl/usr/sbin/spctl --test-devid-status1⤵
-
/usr/bin/syslog/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵
-
/usr/sbin/spindump/usr/sbin/spindump1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.parsec-fbf1⤵
-
/System/Library/PrivateFrameworks/CoreParsec.framework/parsec-fbf/System/Library/PrivateFrameworks/CoreParsec.framework/parsec-fbf1⤵