Overview

overview

10

Static

static

10

2024-57-0x...ry.exe

windows7-x64

1

2024-57-0x...ry.exe

windows10-2004-x64

3

2024-57-0x...ry.exe

android-9-x86

2024-57-0x...ry.exe

android-10-x64

2024-57-0x...ry.exe

android-11-x64

2024-57-0x...ry.exe

macos-10.15-amd64

1

2024-57-0x...ry.exe

ubuntu-18.04-amd64

2024-57-0x...ry.exe

debian-9-armhf

2024-57-0x...ry.exe

debian-9-mips

2024-57-0x...ry.exe

debian-9-mipsel

Resubmissions

26-11-2022 11:25

221126-njes1sea7z 10

23-11-2022 13:29

221123-qrda9shf6s 10

23-11-2022 13:25

221123-qpaglaee33 10

23-11-2022 13:18

221123-qjw4eahb6t 10

Analysis

  • max time kernel
    133s
  • max time network
    140s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    26-11-2022 11:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-57-0x0000000000400000-0x000000000064D000-memory.exe

  • Size

    2.3MB

  • MD5

    061cd9903499ab47bc3312659a66ee7a

  • SHA1

    4275eba8c6205a1fbc86b105e63d08f7db190b29

  • SHA256

    a8411e59972b024e551f6093e58cf238fbac4485aeba67c9657bd9e8428d86c4

  • SHA512

    69dd7daf1b5840abc1298eb56acbc7d13ed0c0190e8dcf98d0fee67e8b0b13a2e51c18b35ed97c5ebbf104931a5014b89fbda8844296b0e42649377be566a380

  • SSDEEP

    3072:KExRaQ6raoCoCyz6/mqv1JR+yBtGOeaeWgiTqWqeURsoR+0bc5aCaQFzi:faO1tme++wiuWqeUxR+na2

Score
1/10

Malware Config

Signatures

Processes

  • /usr/sbin/spctl
    /usr/sbin/spctl --status
    1⤵
      PID:496
    • /usr/sbin/spctl
      /usr/sbin/spctl --test-devid-status
      1⤵
        PID:498
      • /usr/bin/syslog
        /usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
        1⤵
          PID:499
        • /bin/sh
          sh -c "sudo /bin/zsh -c \"/Users/run/2024-57-0x0000000000400000-0x000000000064D000-memory.exe\""
          1⤵
            PID:500
          • /bin/bash
            sh -c "sudo /bin/zsh -c \"/Users/run/2024-57-0x0000000000400000-0x000000000064D000-memory.exe\""
            1⤵
              PID:500
            • /bin/bash
              sh -c "sudo /bin/zsh -c \"/Users/run/2024-57-0x0000000000400000-0x000000000064D000-memory.exe\""
              1⤵
                PID:500
              • /usr/bin/sudo
                sudo /bin/zsh -c /Users/run/2024-57-0x0000000000400000-0x000000000064D000-memory.exe
                1⤵
                  PID:500
                • /usr/bin/sudo
                  sudo /bin/zsh -c /Users/run/2024-57-0x0000000000400000-0x000000000064D000-memory.exe
                  1⤵
                    PID:500
                    • /bin/zsh
                      /bin/zsh -c /Users/run/2024-57-0x0000000000400000-0x000000000064D000-memory.exe
                      2⤵
                        PID:513
                      • /bin/zsh
                        /bin/zsh -c /Users/run/2024-57-0x0000000000400000-0x000000000064D000-memory.exe
                        2⤵
                          PID:513
                        • /Users/run/2024-57-0x0000000000400000-0x000000000064D000-memory.exe
                          /Users/run/2024-57-0x0000000000400000-0x000000000064D000-memory.exe
                          2⤵
                            PID:513
                          • /Users/run/2024-57-0x0000000000400000-0x000000000064D000-memory.exe
                            /Users/run/2024-57-0x0000000000400000-0x000000000064D000-memory.exe
                            2⤵
                              PID:513

                          Network

                          MITRE ATT&CK Matrix

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads