Overview

overview

6

Static

static

1

Devment_5.rdp

windows7-x64

6

Devment_5.rdp

windows10-2004-x64

6

Devment_5.rdp

android-9-x86

Devment_5.rdp

android-10-x64

Devment_5.rdp

android-11-x64

Devment_5.rdp

macos-10.15-amd64

1

Devment_5.rdp

ubuntu-18.04-amd64

Devment_5.rdp

debian-9-armhf

Devment_5.rdp

debian-9-mips

Devment_5.rdp

debian-9-mipsel

Analysis

  • max time kernel
    135s
  • max time network
    126s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    14/06/2023, 02:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    Devment_5.rdp

  • Size

    86B

  • MD5

    ead61a03def0e733115092a1c61bd62c

  • SHA1

    fb70b326a1a646cf2d035e49c0df9f5685e528eb

  • SHA256

    1eb7f0062c0ab8f6c17ed971fadc7cfb2751cf71f57b46277ecda383d7bc7858

  • SHA512

    688c214091265eb835b1bae498bf08eca5b786f75016198b5a566e1e75de9bd92b7d5e48cd483d8e03ea6cbf42369967480bc0448c17125f2188325e1e487650

Score
1/10

Malware Config

Signatures

Processes

  • /usr/bin/syslog
    /usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
    1⤵
      PID:503
    • /bin/sh
      sh -c "sudo /bin/zsh -c \"/Users/run/Devment_5.rdp\""
      1⤵
        PID:504
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/Devment_5.rdp\""
        1⤵
          PID:504
        • /bin/bash
          sh -c "sudo /bin/zsh -c \"/Users/run/Devment_5.rdp\""
          1⤵
            PID:504
          • /usr/bin/sudo
            sudo /bin/zsh -c /Users/run/Devment_5.rdp
            1⤵
              PID:504
            • /usr/bin/sudo
              sudo /bin/zsh -c /Users/run/Devment_5.rdp
              1⤵
                PID:504
                • /bin/zsh
                  /bin/zsh -c /Users/run/Devment_5.rdp
                  2⤵
                    PID:506
                  • /bin/zsh
                    /bin/zsh -c /Users/run/Devment_5.rdp
                    2⤵
                      PID:506
                    • /Users/run/Devment_5.rdp
                      /Users/run/Devment_5.rdp
                      2⤵
                        PID:506
                      • /Users/run/Devment_5.rdp
                        /Users/run/Devment_5.rdp
                        2⤵
                          PID:506
                        • /bin/sh
                          sh /Users/run/Devment_5.rdp
                          2⤵
                            PID:506
                          • /bin/sh
                            sh /Users/run/Devment_5.rdp
                            2⤵
                              PID:506
                            • /bin/bash
                              sh /Users/run/Devment_5.rdp
                              2⤵
                                PID:506
                              • /bin/bash
                                sh /Users/run/Devment_5.rdp
                                2⤵
                                  PID:506

                              Network

                                    MITRE ATT&CK Matrix

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads