2227af2b3c4b388ef4608bdfefa758843a51972f40ce0c081a68b15cbc2297a4

Resubmissions

11-01-2024 03:06

240111-dlzwvsdddk 1

11-01-2024 02:43

240111-c7j7vsdaej 1

Analysis

max time kernel
149s
max time network
153s
platform
macos-10.15_amd64
resource
macos-20231201-en
resource tags

arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
11-01-2024 03:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib
Size

6.2MB
MD5

1065c319ec0713b069efe14f7bee339c
SHA1

18deda6debc772d4266ae5e75d689242b2ff0253
SHA256

31e21c1ea995fc4ddd76cd1490078f51eee2d1f8da97d59f1843f91198a7c274
SHA512

7d63498cedd814c8f212a5ba60cd93631b89ac05c1dc22b44a589b8956dbe303776a4c9ff1286c3fe6b463890fbaaf7f456d9e4f6f0e54764c486b6041ff806a
SSDEEP

98304:rgpE3ltAx2iIgRvDSTdzM4qwgwAUuiJ7AglPhvffkESUyGsr:qolt7iI61wgwAm7Ag

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib\""
1⤵
PID:511

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib\""
1⤵
PID:511

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib\""
1⤵
PID:511

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib"
1⤵
PID:511

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib"
1⤵
PID:511
- /bin/zsh
  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib"
  2⤵
  PID:512
- /bin/zsh
  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib"
  2⤵
  PID:512
- /Users/run/Design
  /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib
  2⤵
  PID:512
- /Users/run/Design
  /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCore.dylib
  2⤵
  PID:512

/usr/libexec/xpcproxy
xpcproxy com.apple.secinitd
1⤵
PID:513

/usr/libexec/secinitd
/usr/libexec/secinitd
1⤵
PID:513

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:514

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:514

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:539

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:539

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:540

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:540

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:541

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:541

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:570

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:570

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:576

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:576

/usr/libexec/xpcproxy
xpcproxy com.apple.csrutil.report
1⤵
PID:577

/usr/bin/csrutil
/usr/bin/csrutil report
1⤵
PID:577

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/Users/run/Library/Caches/.dat.nosync021c.8ITgrJ

Filesize
12KB

MD5
fd591e274556a1c9ffe2bed48ccd118e

SHA1
fd36f7736e980ff09ee669cc5c3bbe5f234a0176

SHA256
38a059e67d383984f276a3446bb7418dbf22f937938bfdd63a5d2eb5ae56f57b

SHA512
847203fc2fe24e2620ca73cdc9e52929b54bc7079f9179757658a0b8e063354fd82caf2afbc2a766304ccb9f771063baae36158373cb51a9013fded54b23e2cf

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads