527ca169dae52d7cb4d97f8b08d685fc43aa963c81f9fb3c525c312bd85a0d12

General

Target

Windows-Setup-could-not-configure-Error-1024x576.jpg (1).webp
Size

17KB
MD5

e603900e9807237f2083f34f88c726d9
SHA1

b33b120fd21412649bedbd961ac13fc561433ff5
SHA256

527ca169dae52d7cb4d97f8b08d685fc43aa963c81f9fb3c525c312bd85a0d12
SHA512

1e43798b12e825947f21714164b15a3a58c675a650c19f755d26dc71f849bd907349ec41baa250049967f9f178a32ab5cf1d47e26e46a8ac9f73852985daa4cd
SSDEEP

384:oZh04f3ltS4xGD+w/aqXGJufQrQKcRdzfgoy4tSOSnnzO3Mk/SNbVEHd:oZS4f3lt38Ty38FRVYoFtUO3x6RE9

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Windows-Setup-could-not-configure-Error-1024x576.jpg (1).webp\""
1⤵
PID:489

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Windows-Setup-could-not-configure-Error-1024x576.jpg (1).webp\""
1⤵
PID:489

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Windows-Setup-could-not-configure-Error-1024x576.jpg (1).webp\""
1⤵
PID:489

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Windows-Setup-could-not-configure-Error-1024x576.jpg (1).webp"
1⤵
PID:489

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Windows-Setup-could-not-configure-Error-1024x576.jpg (1).webp"
1⤵
PID:489
- /bin/zsh
  /bin/zsh -c "/Users/run/Windows-Setup-could-not-configure-Error-1024x576.jpg (1).webp"
  2⤵
  PID:497
- /bin/zsh
  /bin/zsh -c "/Users/run/Windows-Setup-could-not-configure-Error-1024x576.jpg (1).webp"
  2⤵
  PID:497

/usr/sbin/spctl
/usr/sbin/spctl --status
1⤵
PID:488

/usr/sbin/spctl
/usr/sbin/spctl --test-devid-status
1⤵
PID:498

/usr/bin/syslog
/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
1⤵
PID:501

/usr/libexec/xpcproxy
xpcproxy com.apple.PerformanceAnalysis.animationperfd
1⤵
PID:516

/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
1⤵
PID:516

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:520

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:520

/usr/bin/login
login -pf run
1⤵
PID:523

/usr/bin/login
login -pf run
1⤵
PID:523
- /bin/zsh
  -zsh
  2⤵
  PID:524
- /bin/zsh
  -zsh
  2⤵
  PID:524
- - /usr/libexec/path_helper
    /usr/libexec/path_helper -s
    3⤵
    PID:525
- - /usr/libexec/path_helper
    /usr/libexec/path_helper -s
    3⤵
    PID:525
- - /usr/bin/locale
    locale LC_CTYPE
    3⤵
    PID:526
- - /usr/bin/locale
    locale LC_CTYPE
    3⤵
    PID:526
- - /usr/local/bin/runn
    runn bas
    3⤵
    PID:531
- - /usr/local/bin/runn
    runn bas
    3⤵
    PID:531
- - /usr/bin/runn
    runn bas
    3⤵
    PID:531
- - /usr/bin/runn
    runn bas
    3⤵
    PID:531
- - /bin/runn
    runn bas
    3⤵
    PID:531
- - /bin/runn
    runn bas
    3⤵
    PID:531
- - /usr/sbin/runn
    runn bas
    3⤵
    PID:531
- - /usr/sbin/runn
    runn bas
    3⤵
    PID:531
- - /sbin/runn
    runn bas
    3⤵
    PID:531
- - /sbin/runn
    runn bas
    3⤵
    PID:531
- - /usr/local/bin/run
    run bash
    3⤵
    PID:532
- - /usr/local/bin/run
    run bash
    3⤵
    PID:532
- - /usr/bin/run
    run bash
    3⤵
    PID:532
- - /usr/bin/run
    run bash
    3⤵
    PID:532
- - /bin/run
    run bash
    3⤵
    PID:532
- - /bin/run
    run bash
    3⤵
    PID:532
- - /usr/sbin/run
    run bash
    3⤵
    PID:532
- - /usr/sbin/run
    run bash
    3⤵
    PID:532
- - /sbin/run
    run bash
    3⤵
    PID:532
- - /sbin/run
    run bash
    3⤵
    PID:532

/usr/libexec/xpcproxy
xpcproxy com.apple.systemprofiler
1⤵
PID:538

/System/Applications/Utilities/System Information.app/Contents/MacOS/System Information
"/System/Applications/Utilities/System Information.app/Contents/MacOS/System Information"
1⤵
PID:538

/usr/libexec/xpcproxy
xpcproxy com.apple.replayd
1⤵
PID:541

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportMemoryException
1⤵
PID:543

/usr/libexec/xpcproxy
xpcproxy com.apple.system_installd
1⤵
PID:546

/usr/libexec/xpcproxy
xpcproxy com.apple.installd
1⤵
PID:547

/usr/libexec/xpcproxy
xpcproxy com.apple.storedownloadd
1⤵
PID:549

/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
1⤵
PID:546

/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
1⤵
PID:547

/usr/libexec/ReportMemoryException
/usr/libexec/ReportMemoryException
1⤵
PID:543

/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
1⤵
PID:549

/usr/libexec/replayd
/usr/libexec/replayd
1⤵
PID:541

/usr/libexec/xpcproxy
xpcproxy com.apple.Safari.CacheDeleteExtension 539
1⤵
PID:550

/Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension
/Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension
1⤵
PID:550

/usr/libexec/xpcproxy
xpcproxy com.apple.systempreferences.2140
1⤵
PID:555

/System/Applications/System Preferences.app/Contents/MacOS/System Preferences
"/System/Applications/System Preferences.app/Contents/MacOS/System Preferences"
1⤵
PID:555

/usr/libexec/xpcproxy
xpcproxy com.apple.AccountProfileRemoteViewService 555
1⤵
PID:556

/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
1⤵
PID:556

/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
1⤵
PID:558

/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
1⤵
PID:559

/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
1⤵
PID:560

/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
1⤵
PID:561

/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
1⤵
PID:562

/usr/libexec/xpcproxy
xpcproxy com.apple.studentd
1⤵
PID:564

/usr/libexec/studentd
/usr/libexec/studentd
1⤵
PID:564

/usr/libexec/xpcproxy
xpcproxy com.apple.metadata.mdwrite
1⤵
PID:566

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/Users/run/.zsh_history

Filesize
546B

MD5
8d384d3ec4489aa4871a22b9df05e22d

SHA1
5263c6ff2537332b395b53235ac2212ce92aa7b7

SHA256
69d813441d442d048803a7b145c5696c7e4c4289c51202a2e04af5edf940cbad

SHA512
c92287182400fce90b6c4b108d2c3d3bf165da8e0de8739d053783cbc98bd697b8f784115aed790fc125ed6c6b63f3f5c9cc1a6bc0025f123acb84302aae04dd

Download Submit
/Users/run/.zsh_history

Filesize
546B

MD5
8d384d3ec4489aa4871a22b9df05e22d

SHA1
5263c6ff2537332b395b53235ac2212ce92aa7b7

SHA256
69d813441d442d048803a7b145c5696c7e4c4289c51202a2e04af5edf940cbad

SHA512
c92287182400fce90b6c4b108d2c3d3bf165da8e0de8739d053783cbc98bd697b8f784115aed790fc125ed6c6b63f3f5c9cc1a6bc0025f123acb84302aae04dd

Download Submit
/Users/run/.zsh_history.new

Filesize
546B

MD5
8d384d3ec4489aa4871a22b9df05e22d

SHA1
5263c6ff2537332b395b53235ac2212ce92aa7b7

SHA256
69d813441d442d048803a7b145c5696c7e4c4289c51202a2e04af5edf940cbad

SHA512
c92287182400fce90b6c4b108d2c3d3bf165da8e0de8739d053783cbc98bd697b8f784115aed790fc125ed6c6b63f3f5c9cc1a6bc0025f123acb84302aae04dd

Download Submit
/Users/run/Library/Caches/.dat.nosync022b.q3igec

Filesize
294KB

MD5
54a6415f0ccd912e6ef418df31566b14

SHA1
4b00b5adc45cf789c2d3464c184c1f782a73b2dd

SHA256
5703d526d31fb16982bafaab18e698b2bc9c10f5bdb690ad216ea0e09db16633

SHA512
0672d0c9a787f76fedb254202c669cb0553a9f7f99ba9b2e2511005d883a308db5850822fefc4b4dde4e24b0337aae5b215a34c9bb1fa7a0934199fce86613af

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.studentd/TemporaryItems/(A Document Being Saved By studentd)/isConnected

Filesize
9B

MD5
2ec0d16e4ca169baedb9b2d50ec5c6d7

SHA1
c2f9b7b4897f03f94abf92294c9ca46fea62360b

SHA256
22965568d22a14ee17af055d2870b50afcfe9fd94a83eec3196e266932297bb2

SHA512
22f8e80d23c6110fb42017d8f48db768acb5ed4c1a9153bdfc50f8fb0561dd4dc9267efcb9b88bf772200d7fb46c4c19bd86aec41432c12b52ba286729339334

Download Submit
/private/var/run/utmpx

Filesize
3KB

MD5
7a0451948fcdb50c49c747bf2335ceb7

SHA1
94e9359520f91621bd1b0a84d0868464b40ed7bf

SHA256
0b8a11fa3b4f2259b9dd384be0cac97962942855a2b95316901b992a240259c7

SHA512
2f21d685309277c29b05d9db052f333c4cba52b09089f512352e5dc386dd0bb300409ca958313947ded654cfc5f0164f7c30cbbcbfe7a8c74a6ea196e4f9bf69

Download Submit
/private/var/run/utmpx

Filesize
3KB

MD5
7a0451948fcdb50c49c747bf2335ceb7

SHA1
94e9359520f91621bd1b0a84d0868464b40ed7bf

SHA256
0b8a11fa3b4f2259b9dd384be0cac97962942855a2b95316901b992a240259c7

SHA512
2f21d685309277c29b05d9db052f333c4cba52b09089f512352e5dc386dd0bb300409ca958313947ded654cfc5f0164f7c30cbbcbfe7a8c74a6ea196e4f9bf69

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads