678f64071277b63b929d6328a0cbff3d96da7954e2d1e0294c3a110e19beea34

Analysis

max time kernel
136s
max time network
147s
platform
macos_amd64
resource
macos-20220504-en
resource tags

arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
11/05/2023, 17:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

App/FXFX0003.resources
Size

6KB
MD5

e84d76e47a5258f95595f63c8f68994a
SHA1

e8b367156542ee5475455f294ada45fab52a4bc8
SHA256

d5f72b16068630c863a91d138b9072db0fb4cf3b193ebbd373e5b8370887398e
SHA512

a92689bcdd4041d3f82f87da9a905ae6d562ce1978193162c69bf963181886470986e99c9708ea3c174b88ee24d14bed381157c3479070640b674351afb19556
SSDEEP

96:PwWht2FU/Gt2FU/ZE8DPO69xcKMRhFwPtt:P772FU/M2FU/ZE8DP19T4hFw1t

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/App/FXFX0003.resources\""
1⤵
PID:519

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/App/FXFX0003.resources\""
1⤵
PID:519

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/App/FXFX0003.resources\""
1⤵
PID:519

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/App/FXFX0003.resources
1⤵
PID:519

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/App/FXFX0003.resources
1⤵
PID:519
- /bin/zsh
  /bin/zsh -c /Users/run/App/FXFX0003.resources
  2⤵
  PID:520
- /bin/zsh
  /bin/zsh -c /Users/run/App/FXFX0003.resources
  2⤵
  PID:520
- /Users/run/App/FXFX0003.resources
  /Users/run/App/FXFX0003.resources
  2⤵
  PID:520
- /Users/run/App/FXFX0003.resources
  /Users/run/App/FXFX0003.resources
  2⤵
  PID:520
- /bin/sh
  sh /Users/run/App/FXFX0003.resources
  2⤵
  PID:520
- /bin/sh
  sh /Users/run/App/FXFX0003.resources
  2⤵
  PID:520
- /bin/bash
  sh /Users/run/App/FXFX0003.resources
  2⤵
  PID:520
- /bin/bash
  sh /Users/run/App/FXFX0003.resources
  2⤵
  PID:520
- - [installData_aax/]
    "[installData_aax/]" "=" "{" " "
    3⤵
    PID:522
- - [installData_aax/]
    "[installData_aax/]" "=" "{" " "
    3⤵
    PID:522
- - /usr/bin/size
    size "=" "7825063 "
    3⤵
    PID:537
- - /usr/bin/size
    size "=" "7825063 "
    3⤵
    PID:537
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "7825063 "
    3⤵
    PID:537
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "7825063 "
    3⤵
    PID:537
- - [RC-20 Retro Color.aaxplugin/]
    "[RC-20 Retro Color.aaxplugin/]" "=" "{" " "
    3⤵
    PID:539
- - [RC-20 Retro Color.aaxplugin/]
    "[RC-20 Retro Color.aaxplugin/]" "=" "{" " "
    3⤵
    PID:539
- - [Contents/]
    "[Contents/]" "=" "{" " "
    3⤵
    PID:548
- - [Contents/]
    "[Contents/]" "=" "{" " "
    3⤵
    PID:548
- - [Win32/]
    "[Win32/]" "=" "{" " "
    3⤵
    PID:551
- - [Win32/]
    "[Win32/]" "=" "{" " "
    3⤵
    PID:551
- - /usr/bin/size
    size "=" "5586568 "
    3⤵
    PID:556
- - /usr/bin/size
    size "=" "5586568 "
    3⤵
    PID:556
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "5586568 "
    3⤵
    PID:556
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "5586568 "
    3⤵
    PID:556
- - [x64/]
    "[x64/]" "=" "{" " "
    3⤵
    PID:560
- - [x64/]
    "[x64/]" "=" "{" " "
    3⤵
    PID:560
- - /usr/bin/size
    size "=" "7828616 "
    3⤵
    PID:565
- - /usr/bin/size
    size "=" "7828616 "
    3⤵
    PID:565
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "7828616 "
    3⤵
    PID:565
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "7828616 "
    3⤵
    PID:565
- - [installData_aax_x86/]
    "[installData_aax_x86/]" "=" "{" " "
    3⤵
    PID:575
- - [installData_aax_x86/]
    "[installData_aax_x86/]" "=" "{" " "
    3⤵
    PID:575
- - [RC-20 Retro Color.aaxplugin/]
    "[RC-20 Retro Color.aaxplugin/]" "=" "{" " "
    3⤵
    PID:584
- - [RC-20 Retro Color.aaxplugin/]
    "[RC-20 Retro Color.aaxplugin/]" "=" "{" " "
    3⤵
    PID:584
- - [Contents/]
    "[Contents/]" "=" "{" " "
    3⤵
    PID:593
- - [Contents/]
    "[Contents/]" "=" "{" " "
    3⤵
    PID:593
- - [Win32/]
    "[Win32/]" "=" "{" " "
    3⤵
    PID:596
- - [Win32/]
    "[Win32/]" "=" "{" " "
    3⤵
    PID:596
- - /usr/bin/size
    size "=" "5586568 "
    3⤵
    PID:601
- - /usr/bin/size
    size "=" "5586568 "
    3⤵
    PID:601
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "5586568 "
    3⤵
    PID:601
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "5586568 "
    3⤵
    PID:601
- - [x64/]
    "[x64/]" "=" "{" " "
    3⤵
    PID:605
- - [x64/]
    "[x64/]" "=" "{" " "
    3⤵
    PID:605
- - /usr/bin/size
    size "=" "7828616 "
    3⤵
    PID:610
- - /usr/bin/size
    size "=" "7828616 "
    3⤵
    PID:610
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "7828616 "
    3⤵
    PID:610
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "7828616 "
    3⤵
    PID:610
- - [installData_app/]
    "[installData_app/]" "=" "{" " "
    3⤵
    PID:620
- - [installData_app/]
    "[installData_app/]" "=" "{" " "
    3⤵
    PID:620
- - [FXFX0003/]
    "[FXFX0003/]" "=" "{" " "
    3⤵
    PID:623
- - [FXFX0003/]
    "[FXFX0003/]" "=" "{" " "
    3⤵
    PID:623
- - /usr/bin/size
    size "=" "36 "
    3⤵
    PID:628
- - /usr/bin/size
    size "=" "36 "
    3⤵
    PID:628
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "36 "
    3⤵
    PID:628
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "36 "
    3⤵
    PID:628
- - /usr/bin/size
    size "=" "191160 "
    3⤵
    PID:632
- - /usr/bin/size
    size "=" "191160 "
    3⤵
    PID:632
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "191160 "
    3⤵
    PID:632
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "191160 "
    3⤵
    PID:632
- - /usr/bin/size
    size "=" "6969246 "
    3⤵
    PID:636
- - /usr/bin/size
    size "=" "6969246 "
    3⤵
    PID:636
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "6969246 "
    3⤵
    PID:636
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "6969246 "
    3⤵
    PID:636
- - [Manuals/]
    "[Manuals/]" "=" "{" " "
    3⤵
    PID:638
- - [Manuals/]
    "[Manuals/]" "=" "{" " "
    3⤵
    PID:638
- - /usr/bin/size
    size "=" "946633 "
    3⤵
    PID:643
- - /usr/bin/size
    size "=" "946633 "
    3⤵
    PID:643
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "946633 "
    3⤵
    PID:643
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "946633 "
    3⤵
    PID:643
- - /usr/bin/size
    size "=" "130301 "
    3⤵
    PID:649
- - /usr/bin/size
    size "=" "130301 "
    3⤵
    PID:649
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "130301 "
    3⤵
    PID:649
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "130301 "
    3⤵
    PID:649
- - /usr/bin/size
    size "=" "1049877 "
    3⤵
    PID:653
- - /usr/bin/size
    size "=" "1049877 "
    3⤵
    PID:653
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "1049877 "
    3⤵
    PID:653
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "1049877 "
    3⤵
    PID:653
- - /usr/bin/size
    size "=" "21137164 "
    3⤵
    PID:657
- - /usr/bin/size
    size "=" "21137164 "
    3⤵
    PID:657
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "21137164 "
    3⤵
    PID:657
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "21137164 "
    3⤵
    PID:657
- - /usr/bin/size
    size "=" "2020007 "
    3⤵
    PID:661
- - /usr/bin/size
    size "=" "2020007 "
    3⤵
    PID:661
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "2020007 "
    3⤵
    PID:661
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "2020007 "
    3⤵
    PID:661
- - [installData_au/]
    "[installData_au/]" "=" "{" " "
    3⤵
    PID:667
- - [installData_au/]
    "[installData_au/]" "=" "{" " "
    3⤵
    PID:667
- - /usr/bin/size
    size "=" "7811651 "
    3⤵
    PID:678
- - /usr/bin/size
    size "=" "7811651 "
    3⤵
    PID:678
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "7811651 "
    3⤵
    PID:678
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "7811651 "
    3⤵
    PID:678
- - [installData_sound/]
    "[installData_sound/]" "=" "{" " "
    3⤵
    PID:682
- - [installData_sound/]
    "[installData_sound/]" "=" "{" " "
    3⤵
    PID:682
- - [FXFX0003/]
    "[FXFX0003/]" "=" "{" " "
    3⤵
    PID:685
- - [FXFX0003/]
    "[FXFX0003/]" "=" "{" " "
    3⤵
    PID:685
- - /usr/bin/size
    size "=" "14602199 "
    3⤵
    PID:690
- - /usr/bin/size
    size "=" "14602199 "
    3⤵
    PID:690
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "14602199 "
    3⤵
    PID:690
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "14602199 "
    3⤵
    PID:690
- - [installData_user/]
    "[installData_user/]" "=" "{" " "
    3⤵
    PID:696
- - [installData_user/]
    "[installData_user/]" "=" "{" " "
    3⤵
    PID:696
- - [Settings/]
    "[Settings/]" "=" "{" " "
    3⤵
    PID:699
- - [Settings/]
    "[Settings/]" "=" "{" " "
    3⤵
    PID:699
- - /usr/bin/size
    size "=" "668 "
    3⤵
    PID:704
- - /usr/bin/size
    size "=" "668 "
    3⤵
    PID:704
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "668 "
    3⤵
    PID:704
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "668 "
    3⤵
    PID:704
- - [installData_vst/]
    "[installData_vst/]" "=" "{" " "
    3⤵
    PID:710
- - [installData_vst/]
    "[installData_vst/]" "=" "{" " "
    3⤵
    PID:710
- - /usr/bin/size
    size "=" "7655424 "
    3⤵
    PID:721
- - /usr/bin/size
    size "=" "7655424 "
    3⤵
    PID:721
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "7655424 "
    3⤵
    PID:721
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "7655424 "
    3⤵
    PID:721
- - /usr/bin/size
    size "=" "7811391 "
    3⤵
    PID:728
- - /usr/bin/size
    size "=" "7811391 "
    3⤵
    PID:728
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "7811391 "
    3⤵
    PID:728
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "7811391 "
    3⤵
    PID:728
- - [installData_vst_x86/]
    "[installData_vst_x86/]" "=" "{" " "
    3⤵
    PID:732
- - [installData_vst_x86/]
    "[installData_vst_x86/]" "=" "{" " "
    3⤵
    PID:732
- - /usr/bin/size
    size "=" "5465088 "
    3⤵
    PID:746
- - /usr/bin/size
    size "=" "5465088 "
    3⤵
    PID:746
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "5465088 "
    3⤵
    PID:746
- - /Library/Developer/CommandLineTools/usr/bin/size
    /Library/Developer/CommandLineTools/usr/bin/size "=" "5465088 "
    3⤵
    PID:746

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads