Analysis

  • max time kernel
    141s
  • max time network
    138s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    11/10/2023, 19:06

General

  • Target

    owo bot/node_modules/@discordjs/uws/uws_darwin_51.node

  • Size

    380KB

  • MD5

    1f8cb7ccee85b3271280f99724563f59

  • SHA1

    5d3b89afccb47763c94338720fabeaa2f9dca351

  • SHA256

    df840ec6772f6871ccd7975c2ea76535908f729f7bfa04cfcafc8bd1bf667234

  • SHA512

    165c75b39bf34c004eaa7ac0d65d9927a8e096895500b65859351e9f38a9f837f72c97b72daee856fb36c8aaecdec51eff802d6c74ec468840738d536c138d4e

  • SSDEEP

    6144:8NXtSVBgh9MZpc+/IaIjKEg0RnoAsbmAmQfDtrpckLLVjtr84L33/MMoYchG/54H:8NXtSVBgh9MZpc+/IF0KhAm

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_51.node\""
    1⤵
      PID:513
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_51.node\""
      1⤵
        PID:513
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_51.node\""
        1⤵
          PID:513
        • /usr/bin/sudo
          sudo /bin/zsh -c "/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_51.node"
          1⤵
            PID:513
          • /usr/bin/sudo
            sudo /bin/zsh -c "/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_51.node"
            1⤵
              PID:513
              • /bin/zsh
                /bin/zsh -c "/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_51.node"
                2⤵
                  PID:514
                • /bin/zsh
                  /bin/zsh -c "/Users/run/owo bot/node_modules/@discordjs/uws/uws_darwin_51.node"
                  2⤵
                    PID:514
                  • /Users/run/owo
                    /Users/run/owo "bot/node_modules/@discordjs/uws/uws_darwin_51.node"
                    2⤵
                      PID:514
                    • /Users/run/owo
                      /Users/run/owo "bot/node_modules/@discordjs/uws/uws_darwin_51.node"
                      2⤵
                        PID:514
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.tailspind
                      1⤵
                        PID:516
                      • /usr/libexec/tailspind
                        /usr/libexec/tailspind
                        1⤵
                          PID:516

                        Network

                        MITRE ATT&CK Matrix

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads