Overview
overview
1Static
static
1portablemc...t__.py
macos-10.15-amd64
1portablemc...n__.py
macos-10.15-amd64
1portablemc...uth.py
macos-10.15-amd64
1portablemc...t__.py
macos-10.15-amd64
1portablemc...ang.py
macos-10.15-amd64
1portablemc...put.py
macos-10.15-amd64
1portablemc...rse.py
macos-10.15-amd64
1portablemc...til.py
macos-10.15-amd64
1portablemc...oad.py
macos-10.15-amd64
1portablemc...ric.py
macos-10.15-amd64
1portablemc...rge.py
macos-10.15-amd64
1portablemc...ttp.py
macos-10.15-amd64
1portablemc...ard.py
macos-10.15-amd64
1portablemc...til.py
macos-10.15-amd64
1portablemc...est.py
macos-10.15-amd64
1portablemc...isc.py
macos-10.15-amd64
1portablemc...oad.py
macos-10.15-amd64
1portablemc...all.py
macos-10.15-amd64
1portablemc...isc.py
macos-10.15-amd64
1portablemc...ect.py
macos-10.15-amd64
1Analysis
-
max time kernel
338s -
max time network
1804s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
23/08/2023, 09:07
Static task
static1
Behavioral task
behavioral1
Sample
portablemc-4.0.1/portablemc/__init__.py
Resource
macos-20220504-en
Behavioral task
behavioral2
Sample
portablemc-4.0.1/portablemc/__main__.py
Resource
macos-20220504-en
Behavioral task
behavioral3
Sample
portablemc-4.0.1/portablemc/auth.py
Resource
macos-20220504-en
Behavioral task
behavioral4
Sample
portablemc-4.0.1/portablemc/cli/__init__.py
Resource
macos-20220504-en
Behavioral task
behavioral5
Sample
portablemc-4.0.1/portablemc/cli/lang.py
Resource
macos-20220504-en
Behavioral task
behavioral6
Sample
portablemc-4.0.1/portablemc/cli/output.py
Resource
macos-20220504-en
Behavioral task
behavioral7
Sample
portablemc-4.0.1/portablemc/cli/parse.py
Resource
macos-20220504-en
Behavioral task
behavioral8
Sample
portablemc-4.0.1/portablemc/cli/util.py
Resource
macos-20220504-en
Behavioral task
behavioral9
Sample
portablemc-4.0.1/portablemc/download.py
Resource
macos-20220504-en
Behavioral task
behavioral10
Sample
portablemc-4.0.1/portablemc/fabric.py
Resource
macos-20220504-en
Behavioral task
behavioral11
Sample
portablemc-4.0.1/portablemc/forge.py
Resource
macos-20220504-en
Behavioral task
behavioral12
Sample
portablemc-4.0.1/portablemc/http.py
Resource
macos-20220504-en
Behavioral task
behavioral13
Sample
portablemc-4.0.1/portablemc/standard.py
Resource
macos-20220504-en
Behavioral task
behavioral14
Sample
portablemc-4.0.1/portablemc/util.py
Resource
macos-20220504-en
Behavioral task
behavioral15
Sample
portablemc-4.0.1/test/conftest.py
Resource
macos-20220504-en
Behavioral task
behavioral16
Sample
portablemc-4.0.1/test/test_cli_misc.py
Resource
macos-20220504-en
Behavioral task
behavioral17
Sample
portablemc-4.0.1/test/test_download.py
Resource
macos-20220504-en
Behavioral task
behavioral18
Sample
portablemc-4.0.1/test/test_install.py
Resource
macos-20220504-en
Behavioral task
behavioral19
Sample
portablemc-4.0.1/test/test_misc.py
Resource
macos-20220504-en
Behavioral task
behavioral20
Sample
portablemc-4.0.1/test/test_project.py
Resource
macos-20220504-en
General
-
Target
portablemc-4.0.1/portablemc/cli/util.py
-
Size
2KB
-
MD5
fd1e0d76d66fad63599aba3f9d18fa2a
-
SHA1
d050421fbd7b4d84146c012ba9a910c2379a288b
-
SHA256
afa274e8fdc9f4c7fa9db4ba816959fded9ae583a8a41efa23b33d406da9a17b
-
SHA512
eadc399fe68f6b9818faa1af7ecf55660cba57d988f9756cc1c62a0eb630778019a99886bf984846dd8ccb45175f51ef994cfc03b1c5ab411ebdeb0c0d4e3733
Malware Config
Signatures
Processes
-
/usr/bin/syslog/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"1⤵PID:507
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/portablemc-4.0.1/portablemc/cli/util.py\""1⤵PID:508
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/portablemc-4.0.1/portablemc/cli/util.py\""1⤵PID:508
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/portablemc-4.0.1/portablemc/cli/util.py\""1⤵PID:508
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/portablemc-4.0.1/portablemc/cli/util.py1⤵PID:508
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/portablemc-4.0.1/portablemc/cli/util.py1⤵PID:508
-
/bin/zsh/bin/zsh -c /Users/run/portablemc-4.0.1/portablemc/cli/util.py2⤵PID:517
-
-
/bin/zsh/bin/zsh -c /Users/run/portablemc-4.0.1/portablemc/cli/util.py2⤵PID:517
-
-
/Users/run/portablemc-4.0.1/portablemc/cli/util.py/Users/run/portablemc-4.0.1/portablemc/cli/util.py2⤵PID:517
-
-
/Users/run/portablemc-4.0.1/portablemc/cli/util.py/Users/run/portablemc-4.0.1/portablemc/cli/util.py2⤵PID:517
-
-
/bin/shsh /Users/run/portablemc-4.0.1/portablemc/cli/util.py2⤵PID:517
-
-
/bin/shsh /Users/run/portablemc-4.0.1/portablemc/cli/util.py2⤵PID:517
-
-
/bin/bashsh /Users/run/portablemc-4.0.1/portablemc/cli/util.py2⤵PID:517
-
-
/bin/bashsh /Users/run/portablemc-4.0.1/portablemc/cli/util.py2⤵PID:517
-
/usr/bin/fromfrom datetime import datetime3⤵PID:519
-
-
/usr/bin/fromfrom datetime import datetime3⤵PID:519
-
-
/usr/bin/fromfrom portablemc.util import "LibrarySpecifier," from_iso_date3⤵PID:520
-
-
/usr/bin/fromfrom portablemc.util import "LibrarySpecifier," from_iso_date3⤵PID:520
-
-
/usr/bin/fromfrom typing import "Optional," Union3⤵PID:521
-
-
/usr/bin/fromfrom typing import "Optional," Union3⤵PID:521
-
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:557
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:557
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:558
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:558