Analysis
-
max time kernel
68s -
max time network
71s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
01-10-2022 20:14
Behavioral task
behavioral1
Sample
Im Glad My Mom Died (Jennette McCurdy) (z-lib.org).pdf
Resource
win10v2004-20220901-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Im Glad My Mom Died (Jennette McCurdy) (z-lib.org).pdf
Resource
macos-20220504-en
macos-10.15-amd64
0 signatures
150 seconds
General
-
Target
Im Glad My Mom Died (Jennette McCurdy) (z-lib.org).pdf
-
Size
2.6MB
-
MD5
7218eab70ec87e9d80653bf130762521
-
SHA1
f8cd2d3743e2213ceb0d547ff885f327feccd269
-
SHA256
363e649cb9a933cdb7a8f801d819c71d382c3ab8274553ecf3481251c2b877fa
-
SHA512
686b42d97ae2701822025456c04a583b13ecf99955b5bf5a210cccf38b0043d39252bc843992773da593aee6bd5a0ed9a31e6cfd47e8dd17b85b4b3dfed786fb
-
SSDEEP
49152:vZ4bX7+2pWPCXxNrLtCr25kxhDk9WqZ+L617hMq:vZKXi0WqXK2+DkCmN
Score
1/10
Malware Config
Signatures
Processes
-
/usr/bin/syslog/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"1⤵
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Im Glad My Mom Died (Jennette McCurdy) (z-lib.org).pdf\""1⤵
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Im Glad My Mom Died (Jennette McCurdy) (z-lib.org).pdf\""1⤵
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Im Glad My Mom Died (Jennette McCurdy) (z-lib.org).pdf\""1⤵
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Im Glad My Mom Died (Jennette McCurdy) (z-lib.org).pdf"1⤵
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Im Glad My Mom Died (Jennette McCurdy) (z-lib.org).pdf"1⤵
-
/bin/zsh/bin/zsh -c "/Users/run/Im Glad My Mom Died (Jennette McCurdy) (z-lib.org).pdf"2⤵
-
/bin/zsh/bin/zsh -c "/Users/run/Im Glad My Mom Died (Jennette McCurdy) (z-lib.org).pdf"2⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.PerformanceAnalysis.animationperfd1⤵
-
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd1⤵