Analysis

  • max time kernel
    105s
  • max time network
    139s
  • platform
    macos-10.15_amd64
  • resource
    macos-20231201-en
  • resource tags

    arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    10-12-2023 17:31

General

  • Target

    Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Credits.rtf

  • Size

    1KB

  • MD5

    253dae23d32a0d40e0e43f75b9eecfe8

  • SHA1

    1874105049a86a2349c9c821818f59c4ba45cbce

  • SHA256

    e4154bcb2a6d228bd9732fc06239d7f9f1db084faf8b498c79c6444161f24214

  • SHA512

    26d1b1795bd136b14ca760dcf9d8d6729fc5840c108cc19e4b5b325047a734e0df73dcb899e9276c9878718a61b91274dafe368d9b620e81c09b15646df3e8ad

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Credits.rtf\""
    1⤵
      PID:532
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Credits.rtf\""
      1⤵
        PID:532
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Credits.rtf\""
        1⤵
          PID:532
        • /usr/bin/sudo
          sudo /bin/zsh -c "/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Credits.rtf"
          1⤵
            PID:532
          • /usr/bin/sudo
            sudo /bin/zsh -c "/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Credits.rtf"
            1⤵
              PID:532
              • /bin/zsh
                /bin/zsh -c "/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Credits.rtf"
                2⤵
                  PID:540
                • /bin/zsh
                  /bin/zsh -c "/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Credits.rtf"
                  2⤵
                    PID:540
                  • /Users/run/Dropzone
                    /Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Credits.rtf
                    2⤵
                      PID:540
                    • /Users/run/Dropzone
                      /Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Credits.rtf
                      2⤵
                        PID:540
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.audio.systemsoundserverd
                      1⤵
                        PID:544
                      • /usr/sbin/systemsoundserverd
                        /usr/sbin/systemsoundserverd
                        1⤵
                          PID:544
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.pbs
                          1⤵
                            PID:545
                          • /System/Library/CoreServices/pbs
                            /System/Library/CoreServices/pbs
                            1⤵
                              PID:545
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.audio.AudioComponentRegistrar
                              1⤵
                                PID:547
                              • /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
                                /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
                                1⤵
                                  PID:547
                                • /usr/sbin/spctl
                                  /usr/sbin/spctl --assess --type execute /Applications/OneDrive.app
                                  1⤵
                                    PID:564

                                  Network

                                  MITRE ATT&CK Matrix

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  • /Users/run/Library/Caches/.dat.nosync0221.K45C28

                                    Filesize

                                    12KB

                                    MD5

                                    b9b150dc6ea38e62c2f54bec2922d0fc

                                    SHA1

                                    7c5ae87f8956ce90ab2f5d28fa320bd8c5df5e4e

                                    SHA256

                                    4f40ef0f64062bb9b1374a616cacb69b75e792027b12b03b57b1738aa045889c

                                    SHA512

                                    1ffe69c7d23ad771fdc04813fcb69871b4b913548986a8ffd1ccb432c1fe9c978016adbb35cbcb1bf4042442afc373ec07bd45fbd06dd5bf9a2ef9da8f12e078