f85ba13b1d04823edcf037d4a4131aa6c9cad75b2970d3156d67f5284663788d | Triage

Submit
Reports

Overview

overview

6

Static

static

6

Ghost_Bust...NT.dmg

macos-10.15-amd64

Ghost Bust..._store

macos-10.15-amd64

1

Ghost Bust...n.icns

macos-10.15-amd64

1

Ghost Bust...ate#ps

macos-10.15-amd64

1

Ghost Bust...e.macl

macos-10.15-amd64

1

Ghost Bust...antine

macos-10.15-amd64

1

Ghost Bust...bg.png

macos-10.15-amd64

1

Ghost Bust...ate#ps

macos-10.15-amd64

1

Ghost Bust...e.macl

macos-10.15-amd64

1

Ghost Bust...ertags

macos-10.15-amd64

1

Ghost Bust...antine

macos-10.15-amd64

1

Ghost Bust...lp.txt

macos-10.15-amd64

1

Ghost Bust...b7ynxa

macos-10.15-amd64

Ghost Bust...t:rsrc

macos-10.15-amd64

1

Ghost Bust...T].dmg

macos-10.15-amd64

1

Ghost Bust..._store

macos-10.15-amd64

1

Ghost Bust...kgInfo

macos-10.15-amd64

1

Ghost Bust...n.icns

macos-10.15-amd64

1

Ghost Bust...ts.car

macos-10.15-amd64

1

Ghost Bust...fo.xml

macos-10.15-amd64

1

Ghost Bust...trings

macos-10.15-amd64

1

Ghost Bust...trings

macos-10.15-amd64

1

Ghost Bust...s.json

macos-10.15-amd64

1

Ghost Bust...fo.xml

macos-10.15-amd64

1

Ghost Bust...trings

macos-10.15-amd64

1

Ghost Bust...trings

macos-10.15-amd64

1

Ghost Bust...trings

macos-10.15-amd64

1

Ghost Bust...trings

macos-10.15-amd64

1

Ghost Bust...ate#ps

macos-10.15-amd64

1

Ghost Bust...hgz4we

macos-10.15-amd64

1

Ghost Bust...y:rsrc

macos-10.15-amd64

1

Analysis

max time kernel
372s
max time network
607s
platform
macos-10.15_amd64
resource
macos-20231201-en
resource tags

arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
02-01-2024 15:21

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Ghost_Buster_Pro_2_4_3_MAS_TNT.dmg

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral2

Sample

Ghost Buster Pro 2.4.3 MAS/.ds_store

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral3

Sample

Ghost Buster Pro 2.4.3 MAS/.VolumeIcon.icns

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral4

Sample

Ghost Buster Pro 2.4.3 MAS/.VolumeIcon.icns:com.apple.lastuseddate#ps

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral5

Sample

Ghost Buster Pro 2.4.3 MAS/.VolumeIcon.icns:com.apple.macl

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral6

Sample

Ghost Buster Pro 2.4.3 MAS/.VolumeIcon.icns:com.apple.quarantine

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral7

Sample

Ghost Buster Pro 2.4.3 MAS/.background/bg.png

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral8

Sample

Ghost Buster Pro 2.4.3 MAS/.background/bg.png:com.apple.lastuseddate#ps

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral9

Sample

Ghost Buster Pro 2.4.3 MAS/.background/bg.png:com.apple.macl

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral10

Sample

Ghost Buster Pro 2.4.3 MAS/.background/bg.png:com.apple.metadata__kmditemusertags

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral11

Sample

Ghost Buster Pro 2.4.3 MAS/.background/bg.png:com.apple.quarantine

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral12

Sample

Ghost Buster Pro 2.4.3 MAS/Help.txt

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral13

Sample

Ghost Buster Pro 2.4.3 MAS/Help.txt:com.apple.metadata_kmdlabel_dnftphl3a2xxyn2rmlkjb7ynxa

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral14

Sample

Ghost Buster Pro 2.4.3 MAS/Help.txt:rsrc

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral15

Sample

Ghost Buster Pro 2.4.3 MAS/Manual install/Ghost Buster Pro 2.4.3 MAS [TNT].dmg

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral16

Sample

Ghost Buster Pro 2.4.3 MAS/.ds_store

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral17

Sample

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/PkgInfo

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral18

Sample

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/AppIcon.icns

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral19

Sample

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/Assets.car

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral20

Sample

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/BaseKit_BaseKit.bundle/Contents/Info.xml

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral21

Sample

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/BaseKit_BaseKit.bundle/Contents/R.strings

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral22

Sample

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/BaseKit_BaseKit.bundle/Contents/R.strings

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral23

Sample

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/BaseKit_BaseKit.bundle/Contents/Resources/mac-devices.json

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral24

Sample

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Contents/Info.xml

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral25

Sample

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral26

Sample

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral27

Sample

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral28

Sample

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral29

Sample

Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:com.apple.lastuseddate#ps

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral30

Sample

Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Behavioral task

behavioral31

Sample

Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:rsrc

Resource

macos-20231201-en

macos-10.15-amd64

0 signatures

600 seconds

Report Analysis Logs

General

Target

Ghost Buster Pro 2.4.3 MAS/Help.txt
Size

1KB
MD5

e64906f0344c9c0776fc8331f2b6fffe
SHA1

0553b68197e057b1ae4aabb0c499089e2edd4f48
SHA256

785735620545afa1a8354b159c2cce0aad84534b2600b47015bd11918e4cfc7a
SHA512

82ef3a4cde7ff7e205a569ca5175805342fac1073e1a9fc8f45f12cbefe709f199ecf7a8560e9956d1499c825e2c4787c70679d5fe164d4d6b42c4f7d88a4c20

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/Help.txt\""
1⤵
PID:514

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/Help.txt\""
1⤵
PID:514

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/Help.txt\""
1⤵
PID:514

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Help.txt"
1⤵
PID:514

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Help.txt"
1⤵
PID:514
- /bin/zsh
  /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Help.txt"
  2⤵
  PID:515
- /bin/zsh
  /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Help.txt"
  2⤵
  PID:515
- /Users/run/Ghost
  /Users/run/Ghost Buster Pro 2.4.3 MAS/Help.txt
  2⤵
  PID:515
- /Users/run/Ghost
  /Users/run/Ghost Buster Pro 2.4.3 MAS/Help.txt
  2⤵
  PID:515

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:554

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:554

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:559

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:559

/usr/libexec/xpcproxy
xpcproxy com.apple.diagnosticd
1⤵
PID:560

/usr/libexec/diagnosticd
/usr/libexec/diagnosticd
1⤵
PID:560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy