Overview
overview
1Static
static
1a665cd40ef...36.zip
macos-10.15-amd64
1Payload/XA...2x.png
macos-10.15-amd64
1Payload/XA...lt.png
macos-10.15-amd64
1Payload/XA...2x.png
macos-10.15-amd64
1Payload/XA....plist
macos-10.15-amd64
1Payload/XA...kgInfo
macos-10.15-amd64
1Payload/XA....plist
macos-10.15-amd64
1Payload/XA...gs.png
macos-10.15-amd64
1Payload/XA...XAgent
macos-10.15-amd64
1Payload/XA....xcent
macos-10.15-amd64
1Payload/XA...es.xml
macos-10.15-amd64
1Payload/XA...trings
macos-10.15-amd64
1Payload/XA...-3.nib
macos-10.15-amd64
1Payload/XA....plist
macos-10.15-amd64
1Payload/XA...-2.nib
macos-10.15-amd64
1Analysis
-
max time kernel
144s -
max time network
154s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
17-03-2023 11:45
Static task
static1
Behavioral task
behavioral1
Sample
a665cd40efaca89e9257d083328e13446428281d133895f984e847d93634e736.zip
Resource
macos-20220504-en
Behavioral task
behavioral3
Sample
Payload/XAgent.app/Default.png
Resource
macos-20220504-en
Behavioral task
behavioral5
Sample
Payload/XAgent.app/Info.plist
Resource
macos-20220504-en
Behavioral task
behavioral6
Sample
Payload/XAgent.app/PkgInfo
Resource
macos-20220504-en
Behavioral task
behavioral7
Sample
Payload/XAgent.app/ResourceRules.plist
Resource
macos-20220504-en
Behavioral task
behavioral8
Sample
Payload/XAgent.app/Settings.png
Resource
macos-20220504-en
Behavioral task
behavioral9
Sample
Payload/XAgent.app/XAgent
Resource
macos-20220504-en
Behavioral task
behavioral10
Sample
Payload/XAgent.app/XAgent.xcent
Resource
macos-20220504-en
Behavioral task
behavioral11
Sample
Payload/XAgent.app/_CodeSignature/CodeResources.xml
Resource
macos-20220504-en
Behavioral task
behavioral12
Sample
Payload/XAgent.app/en.lproj/InfoPlist.strings
Resource
macos-20220504-en
Behavioral task
behavioral13
Sample
Payload/XAgent.app/en.lproj/MainStoryboard.storyboardc/2-view-3.nib
Resource
macos-20220504-en
Behavioral task
behavioral14
Sample
Payload/XAgent.app/en.lproj/MainStoryboard.storyboardc/Info.plist
Resource
macos-20220504-en
Behavioral task
behavioral15
Sample
Payload/XAgent.app/en.lproj/MainStoryboard.storyboardc/UIViewController-2.nib
Resource
macos-20220504-en
General
-
Target
Payload/XAgent.app/Settings.png
-
Size
10KB
-
MD5
7ef82239427e594cdbf64b83c6deefd1
-
SHA1
a7b37fa3b1ed9db74f2d9c6bcfe2901a76a1ea20
-
SHA256
bcfe4d6733d4a37ab827eff9b9992b5772b9c4875926d07247810de1e38dc0b7
-
SHA512
10c29ff4dd0c17106c493f482489a95d8e5f4e56dfeedba51e671a3efe5b394169aae31a28f2e48f6410657c5967e9cb21002e739a8a48ccb58d03aeded10ec3
-
SSDEEP
192:66Vxu1Z142EUcmAOfaE4qH8GgHXmdqqttt+:66Voz1Km0EbHdMWtt+
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/Settings.png\""1⤵PID:505
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/Settings.png\""1⤵PID:505
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/Settings.png\""1⤵PID:505
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Payload/XAgent.app/Settings.png1⤵PID:505
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Payload/XAgent.app/Settings.png1⤵PID:505
-
/bin/zsh/bin/zsh -c /Users/run/Payload/XAgent.app/Settings.png2⤵PID:515
-
-
/bin/zsh/bin/zsh -c /Users/run/Payload/XAgent.app/Settings.png2⤵PID:515
-
-
/Users/run/Payload/XAgent.app/Settings.png/Users/run/Payload/XAgent.app/Settings.png2⤵PID:515
-
-
/Users/run/Payload/XAgent.app/Settings.png/Users/run/Payload/XAgent.app/Settings.png2⤵PID:515
-