Overview
overview
7Static
static
7SirHurt V4.zip
macos-10.15-amd64
1API.html
macos-10.15-amd64
1DCJ.dll
macos-10.15-amd64
SirHurt V4...er.exe
macos-10.15-amd64
1SirHurt V4.exe
macos-10.15-amd64
1SirHurt V4_New.exe
macos-10.15-amd64
1SirHurt.dll
macos-10.15-amd64
SirHurtACI.dll
macos-10.15-amd64
SirHurtInjector.dll
macos-10.15-amd64
Themes/DCJ.dll
macos-10.15-amd64
Themes/SirHurt.dll
macos-10.15-amd64
Themes/Sir...or.dll
macos-10.15-amd64
Troublesho...Me.txt
macos-10.15-amd64
1XInput1_4.dll
macos-10.15-amd64
bin/OpenSa...ld.ttf
macos-10.15-amd64
1bin/Script 0.lua
macos-10.15-amd64
1bin/Script 0_0.lua
macos-10.15-amd64
1bin/Script 1.lua
macos-10.15-amd64
1bin/Script 2.lua
macos-10.15-amd64
1bin/extens...on.lua
macos-10.15-amd64
1bin/extens...s.json
macos-10.15-amd64
1bin/intellisense.json
macos-10.15-amd64
1bin/scheme...ni.bak
macos-10.15-amd64
1bin/scheme...gs.ini
macos-10.15-amd64
1bin/scheme...s.json
macos-10.15-amd64
1lua5.1.dll
macos-10.15-amd64
lua51.dll
macos-10.15-amd64
sirh.dat
macos-10.15-amd64
1Analysis
-
max time kernel
34s -
max time network
46s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
22/04/2023, 06:56
Behavioral task
behavioral1
Sample
SirHurt V4.zip
Resource
macos-20220504-en
Behavioral task
behavioral2
Sample
API.html
Resource
macos-20220504-en
Behavioral task
behavioral3
Sample
DCJ.dll
Resource
macos-20220504-en
Behavioral task
behavioral4
Sample
SirHurt V4 Bootstrapper.exe
Resource
macos-20220504-en
Behavioral task
behavioral5
Sample
SirHurt V4.exe
Resource
macos-20220504-en
Behavioral task
behavioral6
Sample
SirHurt V4_New.exe
Resource
macos-20220504-en
Behavioral task
behavioral7
Sample
SirHurt.dll
Resource
macos-20220504-en
Behavioral task
behavioral8
Sample
SirHurtACI.dll
Resource
macos-20220504-en
Behavioral task
behavioral9
Sample
SirHurtInjector.dll
Resource
macos-20220504-en
Behavioral task
behavioral10
Sample
Themes/DCJ.dll
Resource
macos-20220504-en
Behavioral task
behavioral11
Sample
Themes/SirHurt.dll
Resource
macos-20220504-en
Behavioral task
behavioral12
Sample
Themes/SirHurtInjector.dll
Resource
macos-20220504-en
Behavioral task
behavioral13
Sample
Troubleshooting Guide Read_Me.txt
Resource
macos-20220504-en
Behavioral task
behavioral14
Sample
XInput1_4.dll
Resource
macos-20220504-en
Behavioral task
behavioral15
Sample
bin/OpenSans-SemiBold.ttf
Resource
macos-20220504-en
Behavioral task
behavioral16
Sample
bin/Script 0.lua
Resource
macos-20220504-en
Behavioral task
behavioral17
Sample
bin/Script 0_0.lua
Resource
macos-20220504-en
Behavioral task
behavioral18
Sample
bin/Script 1.lua
Resource
macos-20220504-en
Behavioral task
behavioral19
Sample
bin/Script 2.lua
Resource
macos-20220504-en
Behavioral task
behavioral20
Sample
bin/extensions/test-extension/extension.lua
Resource
macos-20220504-en
Behavioral task
behavioral21
Sample
bin/extensions/test-extension/settings.json
Resource
macos-20220504-en
Behavioral task
behavioral22
Sample
bin/intellisense.json
Resource
macos-20220504-en
Behavioral task
behavioral23
Sample
bin/schemes/Settings.ini.bak
Resource
macos-20220504-en
Behavioral task
behavioral24
Sample
bin/schemes/settings.ini
Resource
macos-20220504-en
Behavioral task
behavioral25
Sample
bin/schemes/settings.json
Resource
macos-20220504-en
Behavioral task
behavioral26
Sample
lua5.1.dll
Resource
macos-20220504-en
Behavioral task
behavioral27
Sample
lua51.dll
Resource
macos-20220504-en
Behavioral task
behavioral28
Sample
sirh.dat
Resource
macos-20220504-en
General
-
Target
SirHurt V4.zip
-
Size
33.4MB
-
MD5
8ea3c925f8592a5e0e23feeadec0e143
-
SHA1
024c61f22ea060cbbb3c752f68898084d7c58b48
-
SHA256
80136d68fa257477d14036bc98826054bb5cac06d6fd9e79dc590cc847c8ba10
-
SHA512
a998a99e08bdc258e5073e3b15c9de43e96ae7523785748987811d16745bd5b362a614874067d2aa2930e0d7815cfd8741b32b26fc785ba88027bad99cfbb3cf
-
SSDEEP
786432:XG2+4gguUDyEszzio0YdXbruXLLfvKXNLbC05x+IQhdsL+:29V//bbEWN33xMdsS
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/SirHurt V4.zip\""1⤵PID:497
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/SirHurt V4.zip\""1⤵PID:497
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/SirHurt V4.zip\""1⤵PID:497
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/SirHurt V4.zip"1⤵PID:497
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/SirHurt V4.zip"1⤵PID:497
-
/bin/zsh/bin/zsh -c "/Users/run/SirHurt V4.zip"2⤵PID:512
-
-
/bin/zsh/bin/zsh -c "/Users/run/SirHurt V4.zip"2⤵PID:512
-
-
/Users/run/SirHurt/Users/run/SirHurt V4.zip2⤵PID:512
-
-
/Users/run/SirHurt/Users/run/SirHurt V4.zip2⤵PID:512
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.PerformanceAnalysis.animationperfd1⤵PID:521
-
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd1⤵PID:521