Resubmissions

08/06/2023, 15:10

230608-sj9evaha8s 1

08/06/2023, 15:09

230608-sjgd3agc97 1

08/06/2023, 14:48

230608-r6xtwsgb74 6

Analysis

  • max time kernel
    34s
  • max time network
    44s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    08/06/2023, 15:09

General

  • Target

    https://getgamez.click/sexgames-tr-v1-log4/?offer=gamebater1&clickid=25eaftwpm37ghfe71a&country=TR&form=short1-jk

Score
1/10

Malware Config

Signatures

Processes

  • /usr/sbin/spctl
    /usr/sbin/spctl --status
    1⤵
      PID:488
    • /bin/sh
      sh -c "sudo /bin/zsh -c \"/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --new-window https://getgamez.click/sexgames-tr-v1-log4/?offer=gamebater1&clickid=25eaftwpm37ghfe71a&country=TR&form=short1-jk\""
      1⤵
        PID:490
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --new-window https://getgamez.click/sexgames-tr-v1-log4/?offer=gamebater1&clickid=25eaftwpm37ghfe71a&country=TR&form=short1-jk\""
        1⤵
          PID:490
        • /bin/bash
          sh -c "sudo /bin/zsh -c \"/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --new-window https://getgamez.click/sexgames-tr-v1-log4/?offer=gamebater1&clickid=25eaftwpm37ghfe71a&country=TR&form=short1-jk\""
          1⤵
            PID:490
          • /usr/bin/sudo
            sudo /bin/zsh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --new-window https://getgamez.click/sexgames-tr-v1-log4/?offer=gamebater1&clickid=25eaftwpm37ghfe71a&country=TR&form=short1-jk"
            1⤵
              PID:490
            • /usr/bin/sudo
              sudo /bin/zsh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --new-window https://getgamez.click/sexgames-tr-v1-log4/?offer=gamebater1&clickid=25eaftwpm37ghfe71a&country=TR&form=short1-jk"
              1⤵
                PID:490
                • /bin/zsh
                  /bin/zsh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --new-window https://getgamez.click/sexgames-tr-v1-log4/?offer=gamebater1&clickid=25eaftwpm37ghfe71a&country=TR&form=short1-jk"
                  2⤵
                    PID:513
                  • /bin/zsh
                    /bin/zsh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --new-window https://getgamez.click/sexgames-tr-v1-log4/?offer=gamebater1&clickid=25eaftwpm37ghfe71a&country=TR&form=short1-jk"
                    2⤵
                      PID:513
                  • /usr/sbin/spctl
                    /usr/sbin/spctl --test-devid-status
                    1⤵
                      PID:512
                    • /usr/bin/syslog
                      /usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
                      1⤵
                        PID:514

                      Network

                            MITRE ATT&CK Matrix

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads