Resubmissions

24-08-2023 15:38

230824-s24mbade77 1

24-08-2023 15:23

230824-ssx36sdd89 1

Analysis

  • max time kernel
    144s
  • max time network
    156s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    24-08-2023 15:23

General

  • Target

    NeatDMInstaller.dmg

  • Size

    1.4MB

  • MD5

    3ea30e034a7791f5f69705f0ad265fcc

  • SHA1

    80b7bff2e61449c058b0dcb3d46c5f9ded9c9572

  • SHA256

    c0e301ee4b13504a76eb6c54846c9dcf6d8148d32489b4bb91bd2062d471ef81

  • SHA512

    a46d53c772b38b97eda2ab38d990ea719af873038c156771006b570d3bb1001e6ed269bfc0374bd90ee9f783c51bd578196edb3ca830f2f22242c7d15e18f385

  • SSDEEP

    24576:9zl2kwbH95EOTiR6scEjR6y+n8hhUgRXTDiEPN4/Xww06IhCKuBbIX:9R2kgMOTiq66yUGhUg1DiEmPwwZIhRuy

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"open /Volumes/NeatDownloadManager/NeatDownloadManager.app\""
    1⤵
      PID:529
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"open /Volumes/NeatDownloadManager/NeatDownloadManager.app\""
      1⤵
        PID:529
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"open /Volumes/NeatDownloadManager/NeatDownloadManager.app\""
        1⤵
          PID:529
        • /usr/bin/sudo
          sudo /bin/zsh -c "open /Volumes/NeatDownloadManager/NeatDownloadManager.app"
          1⤵
            PID:529
          • /usr/bin/sudo
            sudo /bin/zsh -c "open /Volumes/NeatDownloadManager/NeatDownloadManager.app"
            1⤵
              PID:529
              • /bin/zsh
                /bin/zsh -c "open /Volumes/NeatDownloadManager/NeatDownloadManager.app"
                2⤵
                  PID:530
                • /bin/zsh
                  /bin/zsh -c "open /Volumes/NeatDownloadManager/NeatDownloadManager.app"
                  2⤵
                    PID:530
                  • /usr/bin/open
                    open /Volumes/NeatDownloadManager/NeatDownloadManager.app
                    2⤵
                      PID:530
                    • /usr/bin/open
                      open /Volumes/NeatDownloadManager/NeatDownloadManager.app
                      2⤵
                        PID:530
                    • /usr/libexec/xpcproxy
                      xpcproxy com.NeatDownloadManager.2300
                      1⤵
                        PID:532
                      • /Volumes/NeatDownloadManager/NeatDownloadManager.app/Contents/MacOS/NeatDownloadManager
                        /Volumes/NeatDownloadManager/NeatDownloadManager.app/Contents/MacOS/NeatDownloadManager
                        1⤵
                          PID:532

                        Network

                        MITRE ATT&CK Matrix

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads