Overview
overview
1Static
static
1a665cd40ef...36.zip
macos-10.15-amd64
1Payload/XA...2x.png
macos-10.15-amd64
1Payload/XA...lt.png
macos-10.15-amd64
1Payload/XA...2x.png
macos-10.15-amd64
1Payload/XA....plist
macos-10.15-amd64
1Payload/XA...kgInfo
macos-10.15-amd64
1Payload/XA....plist
macos-10.15-amd64
1Payload/XA...gs.png
macos-10.15-amd64
1Payload/XA...XAgent
macos-10.15-amd64
1Payload/XA....xcent
macos-10.15-amd64
1Payload/XA...es.xml
macos-10.15-amd64
1Payload/XA...trings
macos-10.15-amd64
1Payload/XA...-3.nib
macos-10.15-amd64
1Payload/XA....plist
macos-10.15-amd64
1Payload/XA...-2.nib
macos-10.15-amd64
1Analysis
-
max time kernel
147s -
max time network
129s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
17/03/2023, 11:45
Static task
static1
Behavioral task
behavioral1
Sample
a665cd40efaca89e9257d083328e13446428281d133895f984e847d93634e736.zip
Resource
macos-20220504-en
Behavioral task
behavioral3
Sample
Payload/XAgent.app/Default.png
Resource
macos-20220504-en
Behavioral task
behavioral5
Sample
Payload/XAgent.app/Info.plist
Resource
macos-20220504-en
Behavioral task
behavioral6
Sample
Payload/XAgent.app/PkgInfo
Resource
macos-20220504-en
Behavioral task
behavioral7
Sample
Payload/XAgent.app/ResourceRules.plist
Resource
macos-20220504-en
Behavioral task
behavioral8
Sample
Payload/XAgent.app/Settings.png
Resource
macos-20220504-en
Behavioral task
behavioral9
Sample
Payload/XAgent.app/XAgent
Resource
macos-20220504-en
Behavioral task
behavioral10
Sample
Payload/XAgent.app/XAgent.xcent
Resource
macos-20220504-en
Behavioral task
behavioral11
Sample
Payload/XAgent.app/_CodeSignature/CodeResources.xml
Resource
macos-20220504-en
Behavioral task
behavioral12
Sample
Payload/XAgent.app/en.lproj/InfoPlist.strings
Resource
macos-20220504-en
Behavioral task
behavioral13
Sample
Payload/XAgent.app/en.lproj/MainStoryboard.storyboardc/2-view-3.nib
Resource
macos-20220504-en
Behavioral task
behavioral14
Sample
Payload/XAgent.app/en.lproj/MainStoryboard.storyboardc/Info.plist
Resource
macos-20220504-en
Behavioral task
behavioral15
Sample
Payload/XAgent.app/en.lproj/MainStoryboard.storyboardc/UIViewController-2.nib
Resource
macos-20220504-en
General
-
Target
Payload/XAgent.app/en.lproj/InfoPlist.strings
-
Size
42B
-
MD5
ce7f5b3d4bfc7b4b0da6a06dccc515f2
-
SHA1
ce657a52a052a3aaf534ecfbf7cbdde4ee334c10
-
SHA256
9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1
-
SHA512
db9de6afa0e14c347aa0988a985b8a453ef133a2413c03bae0fab48bda34d4f9a488db104837a386bb65c393e8f11b1ed4856b211c1c186423649c147d6aabfb
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/en.lproj/InfoPlist.strings\""1⤵PID:492
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/en.lproj/InfoPlist.strings\""1⤵PID:492
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/en.lproj/InfoPlist.strings\""1⤵PID:492
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Payload/XAgent.app/en.lproj/InfoPlist.strings1⤵PID:492
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Payload/XAgent.app/en.lproj/InfoPlist.strings1⤵PID:492
-
/bin/zsh/bin/zsh -c /Users/run/Payload/XAgent.app/en.lproj/InfoPlist.strings2⤵PID:507
-
-
/bin/zsh/bin/zsh -c /Users/run/Payload/XAgent.app/en.lproj/InfoPlist.strings2⤵PID:507
-
-
/Users/run/Payload/XAgent.app/en.lproj/InfoPlist.strings/Users/run/Payload/XAgent.app/en.lproj/InfoPlist.strings2⤵PID:507
-
-
/Users/run/Payload/XAgent.app/en.lproj/InfoPlist.strings/Users/run/Payload/XAgent.app/en.lproj/InfoPlist.strings2⤵PID:507
-