Resubmissions

11/01/2024, 03:06

240111-dlzwvsdddk 1

11/01/2024, 02:43

240111-c7j7vsdaej 1

Analysis

  • max time kernel
    115s
  • max time network
    153s
  • platform
    macos-10.15_amd64
  • resource
    macos-20231201-en
  • resource tags

    arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    11/01/2024, 02:43

General

  • Target

    Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/startOffer.nib

  • Size

    1KB

  • MD5

    b571f7eaa3e6cbb548bdd76fac00d242

  • SHA1

    7d9e9ba4388d783f50c228719a48bb52f70996ee

  • SHA256

    9904fb2565a53dcf3fbb337685543acece7ddfc9a6aef014f884b5e09edde85e

  • SHA512

    7ec6bdaac5e027bc9552291c82d1d1904b8f25a5283f1113cde09e11a5de1a62149050f3f3194b7fc0451331ee06228a6702f28c29b7a1a1f5b030c0bf566a28

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/startOffer.nib\""
    1⤵
      PID:511
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/startOffer.nib\""
      1⤵
        PID:511
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/startOffer.nib\""
        1⤵
          PID:511
        • /usr/bin/sudo
          sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/startOffer.nib"
          1⤵
            PID:511
          • /usr/bin/sudo
            sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/startOffer.nib"
            1⤵
              PID:511
              • /bin/zsh
                /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/startOffer.nib"
                2⤵
                  PID:512
                • /bin/zsh
                  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/startOffer.nib"
                  2⤵
                    PID:512
                  • /Users/run/Design
                    /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/startOffer.nib
                    2⤵
                      PID:512
                    • /Users/run/Design
                      /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/startOffer.nib
                      2⤵
                        PID:512
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.sysmond
                      1⤵
                        PID:536
                      • /usr/libexec/sysmond
                        /usr/libexec/sysmond
                        1⤵
                          PID:536
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.audio.systemsoundserverd
                          1⤵
                            PID:538
                          • /usr/sbin/systemsoundserverd
                            /usr/sbin/systemsoundserverd
                            1⤵
                              PID:538
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.pbs
                              1⤵
                                PID:539
                              • /System/Library/CoreServices/pbs
                                /System/Library/CoreServices/pbs
                                1⤵
                                  PID:539
                                • /usr/libexec/xpcproxy
                                  xpcproxy com.apple.audio.AudioComponentRegistrar
                                  1⤵
                                    PID:540
                                  • /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
                                    /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
                                    1⤵
                                      PID:540
                                    • /usr/libexec/xpcproxy
                                      xpcproxy com.apple.tailspind
                                      1⤵
                                        PID:570
                                      • /usr/libexec/tailspind
                                        /usr/libexec/tailspind
                                        1⤵
                                          PID:570
                                        • /usr/libexec/xpcproxy
                                          xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
                                          1⤵
                                            PID:577
                                          • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                            /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                            1⤵
                                              PID:577

                                            Network

                                            MITRE ATT&CK Matrix

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            • /Users/run/Library/Caches/.dat.nosync021b.Bh6CKY

                                              Filesize

                                              12KB

                                              MD5

                                              7fcc7016a80ff0067c17dbc6dbf7dc9a

                                              SHA1

                                              50378f89e7a072eacdcdd82da0bf63bdb7d070a9

                                              SHA256

                                              acf868879175d279e10405580afa90190300d64c5da1fa83f8d33eafa3a36668

                                              SHA512

                                              cccc22181c24dc379b07a950dd21a7d4f5ddcfe8b806c29562a1306bda185984d96faade08e22de7145adbe8129c6818a881169f1666c7c5f150b99828b5f0e4