Analysis
-
max time kernel
144s -
max time network
156s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
24-08-2023 15:23
Static task
static1
Behavioral task
behavioral1
Sample
NeatDMInstaller.dmg
Resource
macos-20220504-en
macos-10.15-amd64
0 signatures
150 seconds
General
-
Target
NeatDMInstaller.dmg
-
Size
1.4MB
-
MD5
3ea30e034a7791f5f69705f0ad265fcc
-
SHA1
80b7bff2e61449c058b0dcb3d46c5f9ded9c9572
-
SHA256
c0e301ee4b13504a76eb6c54846c9dcf6d8148d32489b4bb91bd2062d471ef81
-
SHA512
a46d53c772b38b97eda2ab38d990ea719af873038c156771006b570d3bb1001e6ed269bfc0374bd90ee9f783c51bd578196edb3ca830f2f22242c7d15e18f385
-
SSDEEP
24576:9zl2kwbH95EOTiR6scEjR6y+n8hhUgRXTDiEPN4/Xww06IhCKuBbIX:9R2kgMOTiq66yUGhUg1DiEmPwwZIhRuy
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"open /Volumes/NeatDownloadManager/NeatDownloadManager.app\""1⤵PID:529
-
/bin/bashsh -c "sudo /bin/zsh -c \"open /Volumes/NeatDownloadManager/NeatDownloadManager.app\""1⤵PID:529
-
/bin/bashsh -c "sudo /bin/zsh -c \"open /Volumes/NeatDownloadManager/NeatDownloadManager.app\""1⤵PID:529
-
/usr/bin/sudosudo /bin/zsh -c "open /Volumes/NeatDownloadManager/NeatDownloadManager.app"1⤵PID:529
-
/usr/bin/sudosudo /bin/zsh -c "open /Volumes/NeatDownloadManager/NeatDownloadManager.app"1⤵PID:529
-
/bin/zsh/bin/zsh -c "open /Volumes/NeatDownloadManager/NeatDownloadManager.app"2⤵PID:530
-
-
/bin/zsh/bin/zsh -c "open /Volumes/NeatDownloadManager/NeatDownloadManager.app"2⤵PID:530
-
-
/usr/bin/openopen /Volumes/NeatDownloadManager/NeatDownloadManager.app2⤵PID:530
-
-
/usr/bin/openopen /Volumes/NeatDownloadManager/NeatDownloadManager.app2⤵PID:530
-
-
/usr/libexec/xpcproxyxpcproxy com.NeatDownloadManager.23001⤵PID:532
-
/Volumes/NeatDownloadManager/NeatDownloadManager.app/Contents/MacOS/NeatDownloadManager/Volumes/NeatDownloadManager/NeatDownloadManager.app/Contents/MacOS/NeatDownloadManager1⤵PID:532