Overview

overview

1

Static

static

1

macsfancontrol.zip

macos-10.15-amd64

1

Analysis

  • max time kernel
    145s
  • max time network
    150s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    11/10/2023, 22:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    macsfancontrol.zip

  • Size

    21.7MB

  • MD5

    d5677604032cab879079cdf4daf3fca6

  • SHA1

    3c119187862347853d440fe13302e2b5bfbeb9f0

  • SHA256

    a8a6df38ddb1de83df768bbf8cada53bee082ee385973b1e14d7f752db29cccd

  • SHA512

    484f3a1045429467fc40713df67a3354eef4e9cc8081b214da6e3247f65c886afbeb5b90cc9ad56775cca2803afa5b6b55b3a59dfa94c7444093fa2d6eb21699

  • SSDEEP

    393216:I+FQflP3bP8S+G3RqUTHVdqw+Oh3q5w+eqWIedR2dHbtJFDmrv0I23OvtMmenphu:/Q10wAUT3qw+moO8f7LDev0z30tLEhDC

Score
1/10

Malware Config

Signatures

Processes

  • /usr/bin/syslog
    /usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
    1⤵
      PID:503
    • /bin/sh
      sh -c "sudo /bin/zsh -c \"/Users/run/macsfancontrol.zip\""
      1⤵
        PID:505
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/macsfancontrol.zip\""
        1⤵
          PID:505
        • /bin/bash
          sh -c "sudo /bin/zsh -c \"/Users/run/macsfancontrol.zip\""
          1⤵
            PID:505
          • /usr/bin/sudo
            sudo /bin/zsh -c /Users/run/macsfancontrol.zip
            1⤵
              PID:505
            • /usr/bin/sudo
              sudo /bin/zsh -c /Users/run/macsfancontrol.zip
              1⤵
                PID:505
                • /bin/zsh
                  /bin/zsh -c /Users/run/macsfancontrol.zip
                  2⤵
                    PID:507
                  • /bin/zsh
                    /bin/zsh -c /Users/run/macsfancontrol.zip
                    2⤵
                      PID:507
                    • /Users/run/macsfancontrol.zip
                      /Users/run/macsfancontrol.zip
                      2⤵
                        PID:507
                      • /Users/run/macsfancontrol.zip
                        /Users/run/macsfancontrol.zip
                        2⤵
                          PID:507

                      Network

                            MITRE ATT&CK Matrix

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads