Resubmissions
12/09/2025, 12:54
250912-p5k3laxycv10/09/2025, 13:07
250910-qcvl1azthz110/09/2025, 13:06
250910-qcjjqsyrv5103/11/2023, 14:59
231103-scqn6afe27102/11/2023, 19:33
231102-x9hr2aed2z102/11/2023, 19:29
231102-x7mcfaec8z102/11/2023, 19:28
231102-x6t1wsec7y102/11/2023, 19:27
231102-x6crlsec6x302/11/2023, 17:49
231102-wd3xnadd2z102/11/2023, 17:47
231102-wc6l6adc9x1Analysis
- max time kernel
1379s - max time network
1765s - platform
macos_amd64 - resource
macos-20220504-en - resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
02/11/2023, 19:33
Static task
static1
Behavioral task
behavioral1
Sample
download - 2023-05-02T122403.690.jpg
Resource
macos-20220504-en
0 signatures
1800 seconds
General
- Target download - 2023-05-02T122403.690.jpg
- Size 8KB
- Sample231102-x9hr2aed2z
- SHA256 1af9c152e70466c1e5c501808e2f836bc6f1121567d8493ca95f4ed2de7aeb95
- MD5 dffa55f5e8bbd052dd4d0c371b69c3e3
- SHA1 8298da424a8f9d9ee9f4957caddee146ea4c7f45
- SHA512 0da149201a925919336163d387157a00cbe2992cc6685b4b6731c89893234992661033e0e627890a9d7b755bef931e4e0233100a98ae13903f2128066d22a7b8
- SSDEEP 192:luNs2r9h88h6Bnilz/ApE8xcbBNA+acabmInqhaqoZusQaIrRUiauXe9:4NBdh6N6/ApzxcLAjfqboZnIBzM
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/download - 2023-05-02T122403.690.jpg\""1⤵PID:490
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/download - 2023-05-02T122403.690.jpg\""1⤵PID:490
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/download - 2023-05-02T122403.690.jpg\""1⤵PID:490
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/download - 2023-05-02T122403.690.jpg"1⤵PID:490
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/download - 2023-05-02T122403.690.jpg"1⤵PID:490
-
/bin/zsh/bin/zsh -c "/Users/run/download - 2023-05-02T122403.690.jpg"2⤵PID:505
-
-
/bin/zsh/bin/zsh -c "/Users/run/download - 2023-05-02T122403.690.jpg"2⤵PID:505
-
-
/Users/run/download/Users/run/download - 2023-05-02T122403.690.jpg2⤵PID:505
-
-
/Users/run/download/Users/run/download - 2023-05-02T122403.690.jpg2⤵PID:505
-
-
/usr/sbin/spctl/usr/sbin/spctl --test-devid-status1⤵PID:491
-
/usr/bin/syslog/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"1⤵PID:492
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:547
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:547
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:548
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:548
-
/usr/libexec/xpcproxyxpcproxy com.apple.newsyslog1⤵PID:549
-
/usr/sbin/newsyslog/usr/sbin/newsyslog1⤵PID:549