Overview

overview

6

Static

static

6

Payload/Yo...lderis

macos-10.15-amd64

1

Payload/Yo...strate

macos-10.15-amd64

1

Payload/Yo....dylib

macos-10.15-amd64

1

Payload/Yo...ts.pdf

windows7-x64

1

Payload/Yo...ts.pdf

windows10-2004-x64

1

Payload/Yo...elp.js

windows7-x64

1

Payload/Yo...elp.js

windows10-2004-x64

1

Payload/Yo...dge.js

windows7-x64

1

Payload/Yo...dge.js

windows10-2004-x64

1

Payload/Yo...dge.js

windows7-x64

1

Payload/Yo...dge.js

windows10-2004-x64

1

Payload/Yo...mework

macos-10.15-amd64

1

Payload/Yo...ler.js

windows7-x64

1

Payload/Yo...ler.js

windows10-2004-x64

1

Payload/Yo...t.html

windows7-x64

1

Payload/Yo...t.html

windows10-2004-x64

1

Payload/Yo...t.html

windows7-x64

1

Payload/Yo...t.html

windows10-2004-x64

1

Payload/Yo...ser.js

windows7-x64

1

Payload/Yo...ser.js

windows10-2004-x64

1

Payload/Yo...ser.js

windows7-x64

1

Payload/Yo...ser.js

windows10-2004-x64

1

Payload/Yo...ent.js

windows7-x64

1

Payload/Yo...ent.js

windows10-2004-x64

1

Payload/Yo....dylib

macos-10.15-amd64

1

Payload/Yo....dylib

macos-10.15-amd64

1

Payload/Yo....dylib

macos-10.15-amd64

1

Payload/Yo....dylib

macos-10.15-amd64

1

Payload/Yo....dylib

macos-10.15-amd64

1

Payload/Yo....dylib

macos-10.15-amd64

1

Payload/Yo....dylib

macos-10.15-amd64

1

Payload/Yo....dylib

macos-10.15-amd64

1

Analysis

  • max time kernel
    148s
  • max time network
    185s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    04/10/2023, 01:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Payload/YouTube.app/Frameworks/YTABConfig.dylib

  • Size

    100KB

  • MD5

    d8b13f8010d29764d0298d5fdbfecac7

  • SHA1

    21c19f2774097c7bb76fc8d6aa81c845166ec740

  • SHA256

    d62899d3ea968db98f063727a7c2e35d846977841060bf5016f7506fdcca5e2a

  • SHA512

    6cd6c52dfc65721f7ccb72be6e8fbaae204c0913b4d137cfa5510d3a2ddac929098d22a2e8c180c799e273015154763dd34ab8f3e69aa86451329b4e7198ed0b

  • SSDEEP

    768:/smFN1tUfyKQcRWr9CRvH2qERuHESB2BiFWdaDFmZU2M:3FSfecRWJCR4RuHESBuiFWdLU2M

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Payload/YouTube.app/Frameworks/YTABConfig.dylib\""
    1⤵
      PID:518
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Payload/YouTube.app/Frameworks/YTABConfig.dylib\""
      1⤵
        PID:518
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/Payload/YouTube.app/Frameworks/YTABConfig.dylib\""
        1⤵
          PID:518
        • /usr/bin/sudo
          sudo /bin/zsh -c /Users/run/Payload/YouTube.app/Frameworks/YTABConfig.dylib
          1⤵
            PID:518
          • /usr/bin/sudo
            sudo /bin/zsh -c /Users/run/Payload/YouTube.app/Frameworks/YTABConfig.dylib
            1⤵
              PID:518
              • /bin/zsh
                /bin/zsh -c /Users/run/Payload/YouTube.app/Frameworks/YTABConfig.dylib
                2⤵
                  PID:519
                • /bin/zsh
                  /bin/zsh -c /Users/run/Payload/YouTube.app/Frameworks/YTABConfig.dylib
                  2⤵
                    PID:519
                  • /Users/run/Payload/YouTube.app/Frameworks/YTABConfig.dylib
                    /Users/run/Payload/YouTube.app/Frameworks/YTABConfig.dylib
                    2⤵
                      PID:519
                    • /Users/run/Payload/YouTube.app/Frameworks/YTABConfig.dylib
                      /Users/run/Payload/YouTube.app/Frameworks/YTABConfig.dylib
                      2⤵
                        PID:519
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.tailspind
                      1⤵
                        PID:525
                      • /usr/libexec/tailspind
                        /usr/libexec/tailspind
                        1⤵
                          PID:525

                        Network

                        MITRE ATT&CK Matrix

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads