Overview

overview

1

Static

static

1

Adobe_XD_v...ce.dmg

macos-10.15-amd64

1

Resubmissions

16/05/2023, 05:49

230516-ghzngaaa8y 1

16/05/2023, 05:41

230516-gdlk2sbe95 1

Analysis

  • max time kernel
    296s
  • max time network
    310s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    16/05/2023, 05:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Adobe_XD_v50_0_12_ARM-only_sice.dmg

  • Size

    267.2MB

  • MD5

    13141dc775ea81862a4aefdf78fa129d

  • SHA1

    a6466f198f8e134777661cd714be7905fb434a7d

  • SHA256

    06bb353dd505b2f35171313758edce42c6b292d8a15e3872d32e5b64669f516e

  • SHA512

    1f36405c6033aa3233e113dbdbc2d41b20abbb32dc19503b182509a91dd2c9410fcf368d3c83abcc500ed24c469a52fb2e43c41c2b35b773ffe61f54cf71d585

  • SSDEEP

    6291456:C1rsbn3ChtBbxr4zplmtB3Xgzf7pS+ALjR2d+lB4iKOgQZ3LF9037xl2dMecrtnc:PbnShIliBHgzfV7dJ63Lc3jppnc

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"open /Volumes/Adobe\\ XD\\ v50.0.12\\ ARM-only\\ [sice]/Install\\ SPRK_50.0.12-en_US-macarm64.app\""
    1⤵
      PID:534
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"open /Volumes/Adobe\\ XD\\ v50.0.12\\ ARM-only\\ [sice]/Install\\ SPRK_50.0.12-en_US-macarm64.app\""
      1⤵
        PID:534
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"open /Volumes/Adobe\\ XD\\ v50.0.12\\ ARM-only\\ [sice]/Install\\ SPRK_50.0.12-en_US-macarm64.app\""
        1⤵
          PID:534
        • /usr/bin/sudo
          sudo /bin/zsh -c "open /Volumes/Adobe\\ XD\\ v50.0.12\\ ARM-only\\ [sice]/Install\\ SPRK_50.0.12-en_US-macarm64.app"
          1⤵
            PID:534
          • /usr/bin/sudo
            sudo /bin/zsh -c "open /Volumes/Adobe\\ XD\\ v50.0.12\\ ARM-only\\ [sice]/Install\\ SPRK_50.0.12-en_US-macarm64.app"
            1⤵
              PID:534
              • /bin/zsh
                /bin/zsh -c "open /Volumes/Adobe\\ XD\\ v50.0.12\\ ARM-only\\ [sice]/Install\\ SPRK_50.0.12-en_US-macarm64.app"
                2⤵
                  PID:538
                • /bin/zsh
                  /bin/zsh -c "open /Volumes/Adobe\\ XD\\ v50.0.12\\ ARM-only\\ [sice]/Install\\ SPRK_50.0.12-en_US-macarm64.app"
                  2⤵
                    PID:538
                • /usr/libexec/xpcproxy
                  xpcproxy com.apple.replayd
                  1⤵
                    PID:536
                  • /usr/libexec/xpcproxy
                    xpcproxy com.apple.ReportMemoryException
                    1⤵
                      PID:537
                    • /usr/libexec/replayd
                      /usr/libexec/replayd
                      1⤵
                        PID:536
                      • /usr/libexec/ReportMemoryException
                        /usr/libexec/ReportMemoryException
                        1⤵
                          PID:537
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.installd
                          1⤵
                            PID:540
                          • /System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
                            /System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
                            1⤵
                              PID:540
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.storedownloadd
                              1⤵
                                PID:541
                              • /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
                                /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
                                1⤵
                                  PID:541
                                • /usr/libexec/xpcproxy
                                  xpcproxy com.apple.system_installd
                                  1⤵
                                    PID:543
                                  • /System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
                                    /System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
                                    1⤵
                                      PID:543
                                    • /usr/libexec/xpcproxy
                                      xpcproxy com.apple.Safari.CacheDeleteExtension 530
                                      1⤵
                                        PID:546
                                      • /Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension
                                        /Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension
                                        1⤵
                                          PID:546
                                        • /usr/libexec/xpcproxy
                                          xpcproxy com.apple.PerformanceAnalysis.animationperfd
                                          1⤵
                                            PID:551
                                          • /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
                                            /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
                                            1⤵
                                              PID:551
                                            • /usr/libexec/xpcproxy
                                              xpcproxy com.apple.quicklook.satellite.2B7604B4-6A83-4FEC-9E2E-23B190834B04 545
                                              1⤵
                                                PID:565
                                              • /System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
                                                /System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
                                                1⤵
                                                  PID:565
                                                • /usr/libexec/xpcproxy
                                                  xpcproxy com.apple.quicklook.ui.helper
                                                  1⤵
                                                    PID:567
                                                  • /System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
                                                    /System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
                                                    1⤵
                                                      PID:567
                                                    • /usr/libexec/xpcproxy
                                                      xpcproxy com.apple.XprotectFramework.AnalysisService 520
                                                      1⤵
                                                        PID:568
                                                      • /System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
                                                        /System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
                                                        1⤵
                                                          PID:568
                                                        • /usr/libexec/xpcproxy
                                                          xpcproxy com.apple.ReportMemoryException
                                                          1⤵
                                                            PID:576
                                                          • /usr/libexec/ReportMemoryException
                                                            /usr/libexec/ReportMemoryException
                                                            1⤵
                                                              PID:576
                                                            • /usr/libexec/xpcproxy
                                                              xpcproxy com.apple.bsd.dirhelper
                                                              1⤵
                                                                PID:577
                                                              • /usr/libexec/xpcproxy
                                                                xpcproxy com.apple.xpc.launchd.oneshot.0x10000002.applet
                                                                1⤵
                                                                  PID:578
                                                                • /Volumes/Adobe XD v50.0.12 ARM-only [sice]/Install SPRK_50.0.12-en_US-macarm64.app/Contents/MacOS/applet
                                                                  "/Volumes/Adobe XD v50.0.12 ARM-only [sice]/Install SPRK_50.0.12-en_US-macarm64.app/Contents/MacOS/applet" -psn_0_196656
                                                                  1⤵
                                                                    PID:578
                                                                  • /usr/libexec/xpcproxy
                                                                    xpcproxy com.apple.helpviewer.1332
                                                                    1⤵
                                                                      PID:591
                                                                    • /System/Library/CoreServices/HelpViewer.app/Contents/MacOS/HelpViewer
                                                                      /System/Library/CoreServices/HelpViewer.app/Contents/MacOS/HelpViewer
                                                                      1⤵
                                                                        PID:591
                                                                      • /usr/libexec/xpcproxy
                                                                        xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
                                                                        1⤵
                                                                          PID:592
                                                                        • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                                                          /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                                                          1⤵
                                                                            PID:592
                                                                          • /usr/libexec/xpcproxy
                                                                            xpcproxy com.apple.xpc.launchd.oneshot.0x10000003.applet
                                                                            1⤵
                                                                              PID:593
                                                                            • /Volumes/Adobe XD v50.0.12 ARM-only [sice]/Install SPRK_50.0.12-en_US-macarm64.app/Contents/MacOS/applet
                                                                              "/Volumes/Adobe XD v50.0.12 ARM-only [sice]/Install SPRK_50.0.12-en_US-macarm64.app/Contents/MacOS/applet" -psn_0_204850
                                                                              1⤵
                                                                                PID:593

                                                                              Network

                                                                              MITRE ATT&CK Matrix

                                                                              Replay Monitor

                                                                              Loading Replay Monitor...

                                                                              Downloads