Overview
overview
3Static
static
3mNxEavE.zip
macos-10.15-amd64
1Ethone.exe
macos-10.15-amd64
1main.pyc
macos-10.15-amd64
1Ethone/ass...rk.ico
macos-10.15-amd64
1Ethone/ass...rd.mp3
macos-10.15-amd64
1Ethone/ass...in.mp3
macos-10.15-amd64
1Ethone/ass...ut.mp3
macos-10.15-amd64
1Ethone/ass...ft.mp3
macos-10.15-amd64
1Ethone/ass...rt.mp3
macos-10.15-amd64
1Ethone/con...g.json
macos-10.15-amd64
1Ethone/con...g.json
macos-10.15-amd64
1Ethone/con...g.json
macos-10.15-amd64
1Ethone/con...g.json
macos-10.15-amd64
1Ethone/fil...fix.py
macos-10.15-amd64
1Ethone/fil...e.json
macos-10.15-amd64
1Ethone/log...s.json
macos-10.15-amd64
1Place the ...re.lnk
macos-10.15-amd64
1README.txt
macos-10.15-amd64
1yeet.exe
macos-10.15-amd64
1Analysis
-
max time kernel
132s -
max time network
155s -
platform
macos-10.15_amd64 -
resource
macos-20231201-en -
resource tags
arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
04/02/2024, 20:50
Behavioral task
behavioral1
Sample
mNxEavE.zip
Resource
macos-20231201-en
Behavioral task
behavioral2
Sample
Ethone.exe
Resource
macos-20231201-en
Behavioral task
behavioral3
Sample
main.pyc
Resource
macos-20231201-en
Behavioral task
behavioral4
Sample
Ethone/assets/ethonedark.ico
Resource
macos-20231201-en
Behavioral task
behavioral5
Sample
Ethone/assets/hard.mp3
Resource
macos-20231201-en
Behavioral task
behavioral6
Sample
Ethone/assets/login.mp3
Resource
macos-20231201-en
Behavioral task
behavioral7
Sample
Ethone/assets/logout.mp3
Resource
macos-20231201-en
Behavioral task
behavioral8
Sample
Ethone/assets/soft.mp3
Resource
macos-20231201-en
Behavioral task
behavioral9
Sample
Ethone/assets/start.mp3
Resource
macos-20231201-en
Behavioral task
behavioral10
Sample
Ethone/configurations/auth_config.json
Resource
macos-20231201-en
Behavioral task
behavioral11
Sample
Ethone/configurations/debug_config.json
Resource
macos-20231201-en
Behavioral task
behavioral12
Sample
Ethone/configurations/main_config.json
Resource
macos-20231201-en
Behavioral task
behavioral13
Sample
Ethone/configurations/webhook_config.json
Resource
macos-20231201-en
Behavioral task
behavioral14
Sample
Ethone/files/custom/fix.py
Resource
macos-20231201-en
Behavioral task
behavioral15
Sample
Ethone/files/themes/ethone.json
Resource
macos-20231201-en
Behavioral task
behavioral16
Sample
Ethone/logs/statistics.json
Resource
macos-20231201-en
Behavioral task
behavioral17
Sample
Place the Ethone folder here.lnk
Resource
macos-20231201-en
Behavioral task
behavioral18
Sample
README.txt
Resource
macos-20231201-en
Behavioral task
behavioral19
Sample
yeet.exe
Resource
macos-20231201-en
General
-
Target
Ethone/configurations/debug_config.json
-
Size
24B
-
MD5
1234454c451a5b0a6ed8071e2cbbc0cc
-
SHA1
ebb63b9df3529f4b554d21fd6922836ca6839053
-
SHA256
72ca50903e98810aff841e17698512da742c78205f2546c1483da57c69d5c137
-
SHA512
9e435a1e613b880305a20f1679edaa5fe04e5086bce09d2c4ace6efd5645bc8d3fcf3c7dcb93bd956f58e6038d686c420779062d73bd91291d44860c620c6e93
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Ethone/configurations/debug_config.json\""1⤵PID:517
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Ethone/configurations/debug_config.json\""1⤵PID:517
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Ethone/configurations/debug_config.json1⤵PID:517
-
/bin/zsh/bin/zsh -c /Users/run/Ethone/configurations/debug_config.json2⤵PID:519
-
-
/Users/run/Ethone/configurations/debug_config.json/Users/run/Ethone/configurations/debug_config.json2⤵PID:519
-
-
/bin/shsh /Users/run/Ethone/configurations/debug_config.json2⤵PID:519
-
-
/bin/bashsh /Users/run/Ethone/configurations/debug_config.json2⤵PID:519
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:562
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:562