Overview
overview
4Static
static
1Install Pa...op.dmg
macos-10.15-amd64
1Install Pa...esktop
macos-10.15-amd64
4Install Pa...PD.rtf
macos-10.15-amd64
4Install Pa...nt.rtf
macos-10.15-amd64
4Install Pa...se.rtf
macos-10.15-amd64
4Install Pa...nt.rtf
macos-10.15-amd64
4Install Pa...se.rtf
macos-10.15-amd64
4Install Pa...nt.rtf
macos-10.15-amd64
4Install Pa...se.rtf
macos-10.15-amd64
4Install Pa...nt.rtf
macos-10.15-amd64
4Install Pa...se.rtf
macos-10.15-amd64
4Install Pa...nt.rtf
macos-10.15-amd64
4Install Pa...se.rtf
macos-10.15-amd64
4Install Pa...nt.rtf
macos-10.15-amd64
4Install Pa...se.rtf
macos-10.15-amd64
4Install Pa...nt.rtf
macos-10.15-amd64
4Install Pa...se.rtf
macos-10.15-amd64
4Install Pa...nt.rtf
macos-10.15-amd64
4Install Pa...se.rtf
macos-10.15-amd64
4Install Pa...nt.rtf
macos-10.15-amd64
4Install Pa...se.rtf
macos-10.15-amd64
4Install Pa...nt.rtf
macos-10.15-amd64
4Install Pa...se.rtf
macos-10.15-amd64
4Install Pa...nt.rtf
macos-10.15-amd64
4Install Pa...se.rtf
macos-10.15-amd64
4Install Pa...nt.rtf
macos-10.15-amd64
4Install Pa...se.rtf
macos-10.15-amd64
Install Pa...nt.rtf
macos-10.15-amd64
4Install Pa...se.rtf
macos-10.15-amd64
4Analysis
-
max time kernel
136s -
max time network
139s -
platform
macos-10.15_amd64 -
resource
macos-20240214-en -
resource tags
arch:amd64arch:i386image:macos-20240214-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
06/03/2024, 20:17
Static task
static1
Behavioral task
behavioral1
Sample
Install Parallels Desktop.dmg
Resource
macos-20240214-en
Behavioral task
behavioral2
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/MacOS/Install Parallels Desktop
Resource
macos-20240214-en
Behavioral task
behavioral3
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/LicenseBetaPD.rtf
Resource
macos-20240214-en
Behavioral task
behavioral4
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/cs.lproj/CepAgreement.rtf
Resource
macos-20240214-en
Behavioral task
behavioral5
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/cs.lproj/License.rtf
Resource
macos-20240214-en
Behavioral task
behavioral6
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/de.lproj/CepAgreement.rtf
Resource
macos-20240214-en
Behavioral task
behavioral7
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/de.lproj/License.rtf
Resource
macos-20240214-en
Behavioral task
behavioral8
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/en.lproj/CepAgreement.rtf
Resource
macos-20240214-en
Behavioral task
behavioral9
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/en.lproj/License.rtf
Resource
macos-20240214-en
Behavioral task
behavioral10
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/es.lproj/CepAgreement.rtf
Resource
macos-20240214-en
Behavioral task
behavioral11
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/es.lproj/License.rtf
Resource
macos-20240214-en
Behavioral task
behavioral12
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/fr.lproj/CepAgreement.rtf
Resource
macos-20240214-en
Behavioral task
behavioral13
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/fr.lproj/License.rtf
Resource
macos-20240214-en
Behavioral task
behavioral14
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/it.lproj/CepAgreement.rtf
Resource
macos-20240214-en
Behavioral task
behavioral15
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/it.lproj/License.rtf
Resource
macos-20240214-en
Behavioral task
behavioral16
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/ja.lproj/CepAgreement.rtf
Resource
macos-20240214-en
Behavioral task
behavioral17
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/ja.lproj/License.rtf
Resource
macos-20240214-en
Behavioral task
behavioral18
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/ko.lproj/CepAgreement.rtf
Resource
macos-20240214-en
Behavioral task
behavioral19
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/ko.lproj/License.rtf
Resource
macos-20240214-en
Behavioral task
behavioral20
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/CepAgreement.rtf
Resource
macos-20240214-en
Behavioral task
behavioral21
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/License.rtf
Resource
macos-20240214-en
Behavioral task
behavioral22
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pt-BR.lproj/CepAgreement.rtf
Resource
macos-20240214-en
Behavioral task
behavioral23
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pt-BR.lproj/License.rtf
Resource
macos-20240214-en
Behavioral task
behavioral24
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/ru.lproj/CepAgreement.rtf
Resource
macos-20240214-en
Behavioral task
behavioral25
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/ru.lproj/License.rtf
Resource
macos-20240214-en
Behavioral task
behavioral26
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/zh-Hans.lproj/CepAgreement.rtf
Resource
macos-20240214-en
Behavioral task
behavioral27
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/zh-Hans.lproj/License.rtf
Resource
macos-20240214-en
Behavioral task
behavioral28
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/zh-Hant-TW.lproj/CepAgreement.rtf
Resource
macos-20240214-en
Behavioral task
behavioral29
Sample
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/zh-Hant-TW.lproj/License.rtf
Resource
macos-20240214-en
General
-
Target
Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/License.rtf
-
Size
178KB
-
MD5
d48bb842e460750413ed130957388308
-
SHA1
fa22a72f2df559866cef741a17286d7356d86955
-
SHA256
6d2b401bdc117e754a2e76cf92a30b2d5e0de27f82796c4518c2750edf873b26
-
SHA512
2e6fc39492a5672bec4a8f3b57949ceeb3a6b60f8736d6006d4f49135c25cbf72f1aa78e2998dc35f4b0c9ca84bae67ccfea190534f3f79256db7091dca95685
-
SSDEEP
3072:lkQGW2Fzr66XP07MQDsVcpuAAqbZH3U8W2HW:lkQGPF3v87FDsVcpui9H39W/
Malware Config
Signatures
-
Resource Forking 1 TTPs 4 IoCs
ioc Process sh -c "sudo /bin/zsh -c \"/Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/License.rtf\"" Process not Found sudo /bin/zsh -c "/Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/License.rtf" Process not Found /bin/zsh -c "/Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/License.rtf" Process not Found /Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/License.rtf Process not Found
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/License.rtf\""1⤵PID:533
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/License.rtf\""1⤵PID:533
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/License.rtf"1⤵PID:533
-
/bin/zsh/bin/zsh -c "/Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/License.rtf"2⤵PID:534
-
-
/Users/run/Install/Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/License.rtf2⤵PID:534
-
-
/usr/libexec/dmd/usr/libexec/dmd1⤵PID:522
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:538
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:538
-
/usr/libexec/xpcproxyxpcproxy com.apple.geod1⤵PID:566
-
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod1⤵PID:566
-
/usr/libexec/xpcproxyxpcproxy com.apple.AddressBook.ContactsAccountsService1⤵PID:567
-
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService1⤵PID:567
-
/usr/libexec/xpcproxyxpcproxy com.apple.routined1⤵PID:568
-
/usr/libexec/routined/usr/libexec/routined LAUNCHED_BY_LAUNCHD1⤵PID:568
-
/usr/libexec/xpcproxyxpcproxy com.apple.Maps.mapspushd1⤵PID:569
-
/System/Library/CoreServices/mapspushd/System/Library/CoreServices/mapspushd1⤵PID:569
-
/usr/libexec/xpcproxyxpcproxy com.apple.nehelper1⤵PID:571
-
/usr/libexec/nehelper/usr/libexec/nehelper1⤵PID:571
-
/usr/libexec/xpcproxyxpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A1⤵PID:574
-
/usr/libexec/neagent/usr/libexec/neagent1⤵PID:574
-
/usr/libexec/xpcproxyxpcproxy com.apple.pbs1⤵PID:575
-
/System/Library/CoreServices/pbs/System/Library/CoreServices/pbs1⤵PID:575
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:585
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:585
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
42B
MD5ce7f5b3d4bfc7b4b0da6a06dccc515f2
SHA1ce657a52a052a3aaf534ecfbf7cbdde4ee334c10
SHA2569261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1
SHA512db9de6afa0e14c347aa0988a985b8a453ef133a2413c03bae0fab48bda34d4f9a488db104837a386bb65c393e8f11b1ed4856b211c1c186423649c147d6aabfb
-
Filesize
81B
MD5520bb9b65b89f03050030e5a985b9cd1
SHA191defba6d4540d4c8ede177730d104d747e8f57b
SHA2566bb23965fd46b9ffe67a1cdb2144943543894e063c05db3a4de54e94b84968a0
SHA51281eebb3eda761a9ecc94aa9564deab4d476522d94025ec19e002e91b12b7fbf2bffda23e7c393c09cb91b6ecd953ec1bf39ef5f787058b70289a5a5d777f0cf6
-
Filesize
126B
MD552ef57acdaa153c35594e46bde4fe42c
SHA1c2a5b1748aa61c311b670ef319d92663e3f92b00
SHA25658add3e6d1d91409a9ddd9bb9b7cb173f3ec1162905d907839ab007e43cf2d2a
SHA512defea7dd6200a17dbf0b619e16efb2919dc14199e7f3cb6755b4e5f1fdc8fb2942fa9f7c8c4c19d9026acb0c64a7df0462c7e10685c7482e710e94ed15964209
-
Filesize
124KB
MD5de8229c4d147d3023070941bc9a70787
SHA12c0a1d9d75794a81ea48e170b1d11b9dda9aa217
SHA256c22a94df916618f26131ec8652071a464e03bb8d32d4a3f22843f1cd54df9df3
SHA5124a9e4a9d99f956fd14096b66cd4fe6975e44a97f35426edaa383eecd142d36bd3247286ba15301301f44c2bfbb78a6f1db21192825eb072581e00969f2fa6f34
-
Filesize
157KB
MD5f627cf4820da06be8e6ff3fdec6ebfee
SHA1993d8ec88721b9e76c3fe1f5987338a61b452bf8
SHA256f1d2905b871b9b80172b7c9dc298c1a3dd355e6ae633f77562f4e06ed52a54e7
SHA512bf698aa0eee296df872b91432670af719bda88be3b6d210a567b500da1cedc0e07055a805c2331ccacea0a8a17396e2e37b4bf70894b9052723049c96083001f