f85ba13b1d04823edcf037d4a4131aa6c9cad75b2970d3156d67f5284663788d

Analysis

max time kernel
484s
max time network
607s
platform
macos-10.15_amd64
resource
macos-20231201-en
resource tags

arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
02/01/2024, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings
Size

2KB
MD5

7bf04bccfd639cb6f191a18f2fa2815d
SHA1

e0d85a0a38a478c8e108213bb90e10d00e9c09c8
SHA256

00923ac06f050529093f2edecb6ffebd4084c11c7f8bcd17f403e7bc182eb3e8
SHA512

bb39fdaea7cb72a001adf22bcf0f71d494b3b6594837f672f9d9e3c0c7d38a8bcab10cdfddb236e3ec8aef24e6c28a1e27e6f1ca6beae0ce5fb14269d91fd01b

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings\""
1⤵
PID:509

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings\""
1⤵
PID:509

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings\""
1⤵
PID:509

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings"
1⤵
PID:509

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings"
1⤵
PID:509
- /bin/zsh
  /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings"
  2⤵
  PID:511
- /bin/zsh
  /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings"
  2⤵
  PID:511
- /Users/run/Ghost
  /Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings
  2⤵
  PID:511
- /Users/run/Ghost
  /Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings
  2⤵
  PID:511

/usr/libexec/xpcproxy
xpcproxy com.apple.secinitd
1⤵
PID:512

/usr/libexec/secinitd
/usr/libexec/secinitd
1⤵
PID:512

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:513

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:513

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:537

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:537

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:538

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:538

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:539

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:539

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:572

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:572

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:576

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:576

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:581

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:581

/usr/libexec/xpcproxy
xpcproxy com.apple.diagnosticd
1⤵
PID:582

/usr/libexec/diagnosticd
/usr/libexec/diagnosticd
1⤵
PID:582

/usr/libexec/xpcproxy
xpcproxy com.apple.PerfPowerServices
1⤵
PID:583

/usr/libexec/PerfPowerServices
/usr/libexec/PerfPowerServices
1⤵
PID:583

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/Users/run/Library/Caches/.dat.nosync021a.Roq4hM

Filesize
12KB

MD5
0a5dac1995d044f0d4d2fbe83d42fe17

SHA1
d5d10060fc788a88b66f9b79b9f6a34d20bbb43e

SHA256
d1b2a6186a49e7fc96d2d1fd7596f525a7acd43906a0136a64ea00fe6d2cdb75

SHA512
349526c1cc7ffd92145f7777d11c37ccc5b8f52326f3d7fbf4b5a0eea2f2826ca3bc67fcb096ec65639c7212852b8e478db57fdae759da9b76153658bea791b2

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads