Analysis
- max time kernel
144s - max time network
143s - platform
macos_amd64 - resource
macos-20220504-en - resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
12/10/2023, 15:53
Static task
static1
Behavioral task
behavioral1
Sample
Lockdown Browser.dmg
Resource
macos-20220504-en
0 signatures
150 seconds
General
- Target Lockdown Browser.dmg
- Size 103.3MB
- Sample231012-tbvr6aaa3s
- SHA256 7f8003718b69109a037bf1312e08d84bd606f3173837a45a9850bce5d9e8e540
- MD5 bd1f5b0f01c81f96eae9dcd77c3bba4f
- SHA1 3fa8ce1fdc52e51d2ffa8338251c0a5cf477c68b
- SHA512 1797f16418ab2db07d9c145eb9c48c3dc21ef37b96b7885a180b552a6f5f4c5e82a5d72b5e1d0af08d799f16b7701ca553446d0f79280f7adcac397ebc27a366
- SSDEEP 3145728:9Yj7y4W5fbrVOaA5WKLYbCFtuhou5pUhs/nDJxhWHNHX:c7y4W9vEaWYCbuhou5pUGJzWtHX
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"open /Volumes/NWEA\\ Secure\\ Testing\\ Browser/NWEA\\ Secure\\ Testing\\ Browser.app\""1⤵PID:532
-
/bin/bashsh -c "sudo /bin/zsh -c \"open /Volumes/NWEA\\ Secure\\ Testing\\ Browser/NWEA\\ Secure\\ Testing\\ Browser.app\""1⤵PID:532
-
/bin/bashsh -c "sudo /bin/zsh -c \"open /Volumes/NWEA\\ Secure\\ Testing\\ Browser/NWEA\\ Secure\\ Testing\\ Browser.app\""1⤵PID:532
-
/usr/bin/sudosudo /bin/zsh -c "open /Volumes/NWEA\\ Secure\\ Testing\\ Browser/NWEA\\ Secure\\ Testing\\ Browser.app"1⤵PID:532
-
/usr/bin/sudosudo /bin/zsh -c "open /Volumes/NWEA\\ Secure\\ Testing\\ Browser/NWEA\\ Secure\\ Testing\\ Browser.app"1⤵PID:532
-
/bin/zsh/bin/zsh -c "open /Volumes/NWEA\\ Secure\\ Testing\\ Browser/NWEA\\ Secure\\ Testing\\ Browser.app"2⤵PID:533
-
-
/bin/zsh/bin/zsh -c "open /Volumes/NWEA\\ Secure\\ Testing\\ Browser/NWEA\\ Secure\\ Testing\\ Browser.app"2⤵PID:533
-
-
/usr/bin/openopen "/Volumes/NWEA Secure Testing Browser/NWEA Secure Testing Browser.app"2⤵PID:533
-
-
/usr/bin/openopen "/Volumes/NWEA Secure Testing Browser/NWEA Secure Testing Browser.app"2⤵PID:533
-