2227af2b3c4b388ef4608bdfefa758843a51972f40ce0c081a68b15cbc2297a4

Resubmissions

11/01/2024, 03:06

240111-dlzwvsdddk1

11/01/2024, 02:43

240111-c7j7vsdaej1

Analysis

max time kernel
149s
max time network
153s
platform
macos-10.15_amd64
resource
macos-20231201-en
resource tags

arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
11/01/2024, 03:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib
Size 6.2MB
Sample240111-dlzwvsdddk
SHA256 31e21c1ea995fc4ddd76cd1490078f51eee2d1f8da97d59f1843f91198a7c274
MD5 1065c319ec0713b069efe14f7bee339c
SHA1 18deda6debc772d4266ae5e75d689242b2ff0253
SHA512 7d63498cedd814c8f212a5ba60cd93631b89ac05c1dc22b44a589b8956dbe303776a4c9ff1286c3fe6b463890fbaaf7f456d9e4f6f0e54764c486b6041ff806a
SSDEEP 98304:rgpE3ltAx2iIgRvDSTdzM4qwgwAUuiJ7AglPhvffkESUyGsr:qolt7iI61wgwAm7Ag
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib\""
1⤵
PID:511

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib\""
1⤵
PID:511

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib\""
1⤵
PID:511

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib"
1⤵
PID:511

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib"
1⤵
PID:511
- /bin/zsh
  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib"
  2⤵
  PID:512
- /bin/zsh
  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib"
  2⤵
  PID:512
- /Users/run/Design
  /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib
  2⤵
  PID:512
- /Users/run/Design
  /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib
  2⤵
  PID:512

/usr/libexec/xpcproxy
xpcproxy com.apple.secinitd
1⤵
PID:513

/usr/libexec/secinitd
/usr/libexec/secinitd
1⤵
PID:513

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:514

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:514

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:539

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:539

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:540

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:540

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:541

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:541

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:570

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:570

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:576

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:576

/usr/libexec/xpcproxy
xpcproxy com.apple.csrutil.report
1⤵
PID:577

/usr/bin/csrutil
/usr/bin/csrutil report
1⤵
PID:577

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

.dat.nosync021c.8ITgrJ

Path /Users/run/Library/Caches/.dat.nosync021c.8ITgrJ
Size 12KB
SHA256 38a059e67d383984f276a3446bb7418dbf22f937938bfdd63a5d2eb5ae56f57b
MD5 fd591e274556a1c9ffe2bed48ccd118e
SHA1 fd36f7736e980ff09ee669cc5c3bbe5f234a0176
SHA512 847203fc2fe24e2620ca73cdc9e52929b54bc7079f9179757658a0b8e063354fd82caf2afbc2a766304ccb9f771063baae36158373cb51a9013fded54b23e2cf
SSDEEP 192:yH1/ImUGUd8ibwTA3+AMwmDTQYkCJaL6mLpnWaipSedwXnUfHbI0/oohxENbyhYi:01IXYA3PO8VuEeSXUfbaoPENbhSrHf
MD5 SHA1 SHA512 SSDEEP

Submit Download

mdsDirectory.db_

Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db_
Size 47KB
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20
SSDEEP 384:xSMdGleGkIG7FF3theSMVXBD0tgcNrGB5pBfbouR6/chQOnGqwc2U+v+h/:8MdGleOhpBouRwchQOnGqwc2U+v+h/
MD5 SHA1 SHA512 SSDEEP

Submit Download

mdsObject.db_

Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db_
Size 4KB
SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
MD5 d3a1859e6ec593505cc882e6def48fc8
SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818
SSDEEP 24:mFkXs98w/mBr53CEb9ujBbCYoVeA7uBEUMy733Ka2VCneWHrUZRJkWnJI4FNMOQS:m6Xsh+CLjL3Pe3T5FFEfEn8xiYuuSsS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads