Analysis

  • max time kernel
    134s
  • max time network
    159s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    18/11/2023, 15:47

General

  • Target

    iMazing 2.17.14/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/XPCServices/org.sparkle-project.downloader

  • Size

    276KB

  • MD5

    a4c2a3abc72dcd87e954e89107d4c0fb

  • SHA1

    b6e5134dafd0e0bd00506ccd9a7a2655c9d5cc35

  • SHA256

    5c09b6c5b9224cf1c643e45aac140a6053713748b8df9ffddf474d2a69ed6d42

  • SHA512

    d170769fcede4b89d91a65b0d3805e6917ab8395732a831a5073b5d90e2aa76e01023f28e476eaa774d623e76c8ed5d3c9e03d22803f054d42fcbba2b397dd67

  • SSDEEP

    3072:cSIetlUkHdPlV8YBQpTT/YZ3gcYSy6Wc6VR/fssfsvuaDIlYZMn:ciRV8PpTzogcXAn78hDS/n

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/iMazing 2.17.14/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/XPCServices/org.sparkle-project.downloader\""
    1⤵
      PID:514
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/iMazing 2.17.14/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/XPCServices/org.sparkle-project.downloader\""
      1⤵
        PID:514
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/iMazing 2.17.14/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/XPCServices/org.sparkle-project.downloader\""
        1⤵
          PID:514
        • /usr/bin/sudo
          sudo /bin/zsh -c "/Users/run/iMazing 2.17.14/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/XPCServices/org.sparkle-project.downloader"
          1⤵
            PID:514
          • /usr/bin/sudo
            sudo /bin/zsh -c "/Users/run/iMazing 2.17.14/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/XPCServices/org.sparkle-project.downloader"
            1⤵
              PID:514
              • /bin/zsh
                /bin/zsh -c "/Users/run/iMazing 2.17.14/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/XPCServices/org.sparkle-project.downloader"
                2⤵
                  PID:516
                • /bin/zsh
                  /bin/zsh -c "/Users/run/iMazing 2.17.14/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/XPCServices/org.sparkle-project.downloader"
                  2⤵
                    PID:516
                  • /Users/run/iMazing
                    /Users/run/iMazing 2.17.14/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/XPCServices/org.sparkle-project.downloader
                    2⤵
                      PID:516
                    • /Users/run/iMazing
                      /Users/run/iMazing 2.17.14/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/XPCServices/org.sparkle-project.downloader
                      2⤵
                        PID:516
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.tailspind
                      1⤵
                        PID:518
                      • /usr/libexec/tailspind
                        /usr/libexec/tailspind
                        1⤵
                          PID:518

                        Network

                        MITRE ATT&CK Matrix

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads