Analysis
-
max time kernel
107s -
max time network
141s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
11/01/2023, 21:39
Static task
static1
Behavioral task
behavioral1
Sample
Data/532204087_1355x1355-small-230.jpg
Resource
macos-20220504-en
Behavioral task
behavioral2
Sample
Data/532205080_1647x1098-small-234.jpg
Resource
macos-20220504-en
Behavioral task
behavioral3
Sample
Data/532241774_2880x1920-small-223.jpg
Resource
macos-20220504-en
Behavioral task
behavioral4
Sample
Data/IMG_0556-353.jpg
Resource
macos-20220504-en
Behavioral task
behavioral5
Sample
Data/IMG_0556-small-354.jpg
Resource
macos-20220504-en
Behavioral task
behavioral6
Sample
Metadata/BuildVersionHistory.xml
Resource
macos-20220504-en
General
-
Target
Data/532205080_1647x1098-small-234.jpg
-
Size
9KB
-
MD5
824ba5ef09f1983f9236677ec3a67c29
-
SHA1
3bf8aa7aa9aca39f79a3194b09346ab3a77ce440
-
SHA256
a0fdd14380c5760ffd0a13e126051b7b234a3a7bdb3657bfbc3a8a81e1b52af8
-
SHA512
ce5fbd9b6a8d75838aaff80156d4161c1ecd81462b10a4cf19e3cb9bc2eea3e176e6a4ede89287450045665a965e11d804e80b5d46ce117712b5e6b20f934a48
-
SSDEEP
192:8c36HE2/2B8Z9Ksz1JEy9GSfks1YLfIZtQMpieQ4Ts9sDiONj:8cKHE2ei9xEyDkkYLfIZyMseQ4oWDiO9
Malware Config
Signatures
Processes
-
/usr/bin/syslog/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"1⤵PID:496
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Data/532205080_1647x1098-small-234.jpg\""1⤵PID:497
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Data/532205080_1647x1098-small-234.jpg\""1⤵PID:497
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Data/532205080_1647x1098-small-234.jpg\""1⤵PID:497
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Data/532205080_1647x1098-small-234.jpg1⤵PID:497
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Data/532205080_1647x1098-small-234.jpg1⤵PID:497
-
/bin/zsh/bin/zsh -c /Users/run/Data/532205080_1647x1098-small-234.jpg2⤵PID:509
-
-
/bin/zsh/bin/zsh -c /Users/run/Data/532205080_1647x1098-small-234.jpg2⤵PID:509
-
-
/Users/run/Data/532205080_1647x1098-small-234.jpg/Users/run/Data/532205080_1647x1098-small-234.jpg2⤵PID:509
-
-
/Users/run/Data/532205080_1647x1098-small-234.jpg/Users/run/Data/532205080_1647x1098-small-234.jpg2⤵PID:509
-