Analysis
-
max time kernel
68s -
max time network
151s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
31-03-2023 19:41
Static task
static1
Behavioral task
behavioral1
Sample
steam.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
steam.exe
Resource
macos-20220504-en
Behavioral task
behavioral3
Sample
steam.exe
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral4
Sample
steam.exe
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral5
Sample
steam.exe
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral6
Sample
steam.exe
Resource
debian9-mipsel-en-20211208
General
-
Target
steam.exe
-
Size
11KB
-
MD5
6a0c09c176405806a623c080866cf8fa
-
SHA1
32b9260716481763255b5b995cb2b1a991509db7
-
SHA256
170215feaa262397dbf210a86235fe2df1497539e1645961d24efcc6fea110aa
-
SHA512
a3b16f0d0c3a8be9df8803fc70550b233a701b48f763739c71c2f636520ea60babe2360eca8a042d5469a53a09930e6c5536ee98d6143a81829cd6d9a763a87e
-
SSDEEP
192:aLQbtN4sBtNdaLixVupSiP/VunlYJLLLTuTvLvLvLvLvLvLvLvLvLvgQGSs5cqGE:aLQz4QzdaLiu3hPLTuTvLvLvLvLvLvLB
Malware Config
Signatures
Processes
-
/usr/sbin/spctl/usr/sbin/spctl --test-devid-status1⤵
-
/usr/bin/syslog/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"1⤵
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/steam.exe\""1⤵
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/steam.exe\""1⤵
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/steam.exe\""1⤵
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/steam.exe1⤵
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/steam.exe1⤵
-
/bin/zsh/bin/zsh -c /Users/run/steam.exe2⤵
-
/bin/zsh/bin/zsh -c /Users/run/steam.exe2⤵
-
/Users/run/steam.exe/Users/run/steam.exe2⤵
-
/Users/run/steam.exe/Users/run/steam.exe2⤵