Overview

overview

3

Static

static

3

ConsoleMD/...MD.dmg

macos-10.15-amd64

ConsoleMD/...MDBuss

macos-10.15-amd64

1

ConsoleMD/...MDBuss

macos-10.15-amd64

1

ConsoleMD/...hannel

macos-10.15-amd64

1

ConsoleMD/...hannel

macos-10.15-amd64

1

ConsoleMD/...uss.so

ubuntu-18.04-amd64

1

ConsoleMD/...64.dll

windows7-x64

1

ConsoleMD/...64.dll

windows10-2004-x64

1

ConsoleMD/...nel.so

ubuntu-18.04-amd64

1

ConsoleMD/...64.dll

windows7-x64

1

ConsoleMD/...64.dll

windows10-2004-x64

1

ConsoleMD/...uss.so

debian-9-armhf

1

ConsoleMD/...nel.so

debian-9-armhf

1

ConsoleMD/...MDBuss

macos-10.15-amd64

1

ConsoleMD/...MDBuss

macos-10.15-amd64

1

ConsoleMD/...32.dll

windows7-x64

3

ConsoleMD/...32.dll

windows10-2004-x64

3

ConsoleMD/...hannel

macos-10.15-amd64

1

ConsoleMD/...hannel

macos-10.15-amd64

1

ConsoleMD/...32.dll

windows7-x64

3

ConsoleMD/...32.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    104s
  • max time network
    156s
  • platform
    macos-10.15_amd64
  • resource
    macos-20230831-en
  • resource tags

    arch:amd64arch:i386image:macos-20230831-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    01-11-2023 00:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ConsoleMD/ConsoleMDChannel.vst/Contents/MacOS/ConsoleMDChannel

  • Size

    232KB

  • MD5

    c81d8eac87de1bcde0cce24b309eebe7

  • SHA1

    c34163cb8894e23b86131576c09a200389cda782

  • SHA256

    7be688838837fc6cea86ddb18d2f8ed9c7290458ffeab85552e5e94e212a593e

  • SHA512

    31f1cc8d757d4a1926837bbe1c6df9140ee52b87b42444420db9912ff9b0e0ab38c155c3f4ca5eb3ad7ef5362d1b0df650fbbc9077db45e83a6b0346ccbed4c9

  • SSDEEP

    1536:WszFkSs/p/YLiIH+F/9tEdTkvnrVnscKQqEFWaZPcRP+pRHm4RC/RdTkGnyOK:fMSHH894kjmctPcNAH1CTkw

Score
1/10

Malware Config

Signatures

Processes

  • /usr/libexec/xpcproxy
    xpcproxy com.apple.pluginkit.pkd
    1⤵
      PID:537
    • /usr/libexec/pkd
      /usr/libexec/pkd
      1⤵
        PID:537
      • /bin/sh
        sh -c "sudo /bin/zsh -c \"/Users/run/ConsoleMD/ConsoleMDChannel.vst/Contents/MacOS/ConsoleMDChannel\""
        1⤵
          PID:540
        • /bin/bash
          sh -c "sudo /bin/zsh -c \"/Users/run/ConsoleMD/ConsoleMDChannel.vst/Contents/MacOS/ConsoleMDChannel\""
          1⤵
            PID:540
          • /bin/bash
            sh -c "sudo /bin/zsh -c \"/Users/run/ConsoleMD/ConsoleMDChannel.vst/Contents/MacOS/ConsoleMDChannel\""
            1⤵
              PID:540
            • /usr/bin/sudo
              sudo /bin/zsh -c /Users/run/ConsoleMD/ConsoleMDChannel.vst/Contents/MacOS/ConsoleMDChannel
              1⤵
                PID:540
              • /usr/bin/sudo
                sudo /bin/zsh -c /Users/run/ConsoleMD/ConsoleMDChannel.vst/Contents/MacOS/ConsoleMDChannel
                1⤵
                  PID:540
                  • /bin/zsh
                    /bin/zsh -c /Users/run/ConsoleMD/ConsoleMDChannel.vst/Contents/MacOS/ConsoleMDChannel
                    2⤵
                      PID:544
                    • /bin/zsh
                      /bin/zsh -c /Users/run/ConsoleMD/ConsoleMDChannel.vst/Contents/MacOS/ConsoleMDChannel
                      2⤵
                        PID:544
                      • /Users/run/ConsoleMD/ConsoleMDChannel.vst/Contents/MacOS/ConsoleMDChannel
                        /Users/run/ConsoleMD/ConsoleMDChannel.vst/Contents/MacOS/ConsoleMDChannel
                        2⤵
                          PID:544
                        • /Users/run/ConsoleMD/ConsoleMDChannel.vst/Contents/MacOS/ConsoleMDChannel
                          /Users/run/ConsoleMD/ConsoleMDChannel.vst/Contents/MacOS/ConsoleMDChannel
                          2⤵
                            PID:544
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.secinitd
                          1⤵
                            PID:546
                          • /usr/libexec/secinitd
                            /usr/libexec/secinitd
                            1⤵
                              PID:546
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.sysmond
                              1⤵
                                PID:547
                              • /usr/libexec/sysmond
                                /usr/libexec/sysmond
                                1⤵
                                  PID:547
                                • /usr/bin/bzip2
                                  /usr/bin/bzip2 -f /var/log/wifi.log.0
                                  1⤵
                                    PID:557

                                  Network

                                  MITRE ATT&CK Matrix

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db
                                    Filesize

                                    47KB

                                    MD5

                                    0e4a0d1ceb2af6f0f8d0167ce77be2d3

                                    SHA1

                                    414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

                                    SHA256

                                    cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

                                    SHA512

                                    1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

                                    Download Submit

                                  • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db
                                    Filesize

                                    47KB

                                    MD5

                                    0e4a0d1ceb2af6f0f8d0167ce77be2d3

                                    SHA1

                                    414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

                                    SHA256

                                    cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

                                    SHA512

                                    1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

                                    Download Submit

                                  • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db_
                                    Filesize

                                    47KB

                                    MD5

                                    0e4a0d1ceb2af6f0f8d0167ce77be2d3

                                    SHA1

                                    414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

                                    SHA256

                                    cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

                                    SHA512

                                    1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

                                    Download Submit

                                  • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db
                                    Filesize

                                    4KB

                                    MD5

                                    d3a1859e6ec593505cc882e6def48fc8

                                    SHA1

                                    f8e6728e3e9de477a75706faa95cead9ce13cb32

                                    SHA256

                                    3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

                                    SHA512

                                    ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

                                    Download Submit

                                  • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db_
                                    Filesize

                                    4KB

                                    MD5

                                    d3a1859e6ec593505cc882e6def48fc8

                                    SHA1

                                    f8e6728e3e9de477a75706faa95cead9ce13cb32

                                    SHA256

                                    3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

                                    SHA512

                                    ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

                                    Download Submit

                                  • /private/var/log/wifi.log.0.bz2
                                    Filesize

                                    640B

                                    MD5

                                    5d523b73a63a40eeaf9323065654e442

                                    SHA1

                                    22c94392645438ef283c6d551765e91a10fda120

                                    SHA256

                                    cb02c4b112c640c42dd4de447ed4e596c6eaa6e607f512e1e92d5611c605249b

                                    SHA512

                                    495ba1d7a1cecb9c4218663ddeca6bc572784f7f6a052891df3076d534d712d48a986421f45ba925f041c5d5d994ab98755057d3c258a1c5ad865b1537b3fe67

                                    Download Submit

                                  • /private/var/log/wifi.log.0.bz2
                                    Filesize

                                    640B

                                    MD5

                                    5d523b73a63a40eeaf9323065654e442

                                    SHA1

                                    22c94392645438ef283c6d551765e91a10fda120

                                    SHA256

                                    cb02c4b112c640c42dd4de447ed4e596c6eaa6e607f512e1e92d5611c605249b

                                    SHA512

                                    495ba1d7a1cecb9c4218663ddeca6bc572784f7f6a052891df3076d534d712d48a986421f45ba925f041c5d5d994ab98755057d3c258a1c5ad865b1537b3fe67

                                    Download Submit