ca27805b6b4caceaa472c8c3d9098257a72ca7b21444435f8640e800f8731f09 | Triage

Submit
Reports

Overview

overview

Static

static

1.zip

windows7-x64

1

1.zip

windows10-2004-x64

1

1.zip

android-9-x86

1.zip

android-10-x64

1.zip

android-11-x64

1.zip

macos-10.15-amd64

1

1.zip

ubuntu-18.04-amd64

1.zip

debian-9-armhf

1.zip

debian-9-mips

1.zip

debian-9-mipsel

Analysis

max time kernel
649s
max time network
1797s
platform
macos_amd64
resource
macos-20220504-en
resource tags

arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
09-06-2023 17:04

Sharing

Static task

static1

themida pyinstaller agilenet nanocore

5 signatures

Behavioral task

behavioral1

Sample

1.zip

Resource

win7-20230220-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral2

Sample

1.zip

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral3

Sample

1.zip

Resource

android-x86-arm-20220823-en

android-9-x86

0 signatures

1800 seconds

Behavioral task

behavioral4

Sample

1.zip

Resource

android-x64-20220823-en

android-10-x64

0 signatures

1800 seconds

Behavioral task

behavioral5

Sample

1.zip

Resource

android-x64-arm64-20220823-en

android-11-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

1.zip

Resource

macos-20220504-en

macos-10.15-amd64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

1.zip

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

1.zip

Resource

debian9-armhf-20221125-en

debian-9-armhf

0 signatures

1800 seconds

Behavioral task

behavioral9

Sample

1.zip

Resource

debian9-mipsbe-20221111-en

debian-9-mips

0 signatures

1800 seconds

Behavioral task

behavioral10

Sample

1.zip

Resource

debian9-mipsel-20221125-en

debian-9-mipsel

0 signatures

1800 seconds

Report Analysis Logs

General

Target

1.zip
Size

229.9MB
MD5

a3df0a5ba1b8f88a114df0b6c2b377f1
SHA1

93523ac0cc47cd393c4453ad9bed5f680d8ff133
SHA256

ca27805b6b4caceaa472c8c3d9098257a72ca7b21444435f8640e800f8731f09
SHA512

d17902c3b06d6976640e3bfcd21c633860e5912d579fb3fe9c317d1c2c8dce07753b6f8787e2c033b8662735b60f1ade8bbd4c0cd6096ca6461ca9a90be22de6
SSDEEP

6291456:mnemYRhOm5ZjyPpu2D9jXD4P9cSH+ZOW81kSPV:mez0kRIDxkP9vHkOW8aSPV

Score

1^/10

Malware Config

Signatures

Processes

/usr/sbin/spctl
/usr/sbin/spctl --test-devid-status
1⤵
PID:513

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/1.zip\""
1⤵
PID:514

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/1.zip\""
1⤵
PID:514

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/1.zip\""
1⤵
PID:514

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/1.zip
1⤵
PID:514

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/1.zip
1⤵
PID:514

/bin/zsh
/bin/zsh -c /Users/run/1.zip
2⤵
PID:517

/bin/zsh
/bin/zsh -c /Users/run/1.zip
2⤵
PID:517

/Users/run/1.zip
/Users/run/1.zip
2⤵
PID:517

/Users/run/1.zip
/Users/run/1.zip
2⤵
PID:517

/usr/bin/syslog
/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
1⤵
PID:516

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:547

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:547

/usr/libexec/xpcproxy
xpcproxy com.apple.diagnosticd
1⤵
PID:548

/usr/libexec/diagnosticd
/usr/libexec/diagnosticd
1⤵
PID:548

/usr/libexec/xpcproxy
xpcproxy com.apple.newsyslog
1⤵
PID:549

/usr/sbin/newsyslog
/usr/sbin/newsyslog
1⤵
PID:549

/usr/libexec/xpcproxy
xpcproxy com.apple.parsec-fbf
1⤵
PID:550

/System/Library/PrivateFrameworks/CoreParsec.framework/parsec-fbf
/System/Library/PrivateFrameworks/CoreParsec.framework/parsec-fbf
1⤵
PID:550

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy