51243079995f79a55cb37c432a3ba9e38689e78a215f109b409bc19b4bb7be8f

Analysis

max time kernel
118s
max time network
142s
platform
macos-10.15_amd64
resource
macos-20240214-en
resource tags

arch:amd64arch:i386image:macos-20240214-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
07-03-2024 07:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Payload/Apollo.app/Frameworks/AFNetworking.framework/AFNetworking
Size

571KB
MD5

07c626f6e66a48839ff7ae5a163c169c
SHA1

c010c78218cbbb3a192fec020c4e692893dc2131
SHA256

c6501de322f244533c28b63b5b5c1184fa6faaeea534fa75db03fcaace54a097
SHA512

3c57d2956873daf82d519cac116c2a7968db1ab365d761c7c70dbc6874e52c989ed3126af661705e7a2a0b16c05c5d41733731825fb12f9e252ae9de67d5db9b
SSDEEP

6144:c7jGfhR3FInmY+9y7o9li3/Ns/+puWTCoqgozQi3/Ns/+c6pKpqRAw:ujGTZY1acUPQq6w

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/Apollo.app/Frameworks/AFNetworking.framework/AFNetworking\""
1⤵
PID:536

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/Apollo.app/Frameworks/AFNetworking.framework/AFNetworking\""
1⤵
PID:536

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Payload/Apollo.app/Frameworks/AFNetworking.framework/AFNetworking
1⤵
PID:536
- /bin/zsh
  /bin/zsh -c /Users/run/Payload/Apollo.app/Frameworks/AFNetworking.framework/AFNetworking
  2⤵
  PID:537
- /Users/run/Payload/Apollo.app/Frameworks/AFNetworking.framework/AFNetworking
  /Users/run/Payload/Apollo.app/Frameworks/AFNetworking.framework/AFNetworking
  2⤵
  PID:537

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:557

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:557

/usr/libexec/xpcproxy
xpcproxy com.apple.nehelper
1⤵
PID:558

/usr/libexec/nehelper
/usr/libexec/nehelper
1⤵
PID:558

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:568

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:568

/usr/libexec/xpcproxy
xpcproxy com.apple.AddressBook.ContactsAccountsService
1⤵
PID:569

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:570

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:570

/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
1⤵
PID:569

/usr/libexec/xpcproxy
xpcproxy com.apple.routined
1⤵
PID:572

/usr/libexec/routined
/usr/libexec/routined LAUNCHED_BY_LAUNCHD
1⤵
PID:572

/usr/libexec/xpcproxy
xpcproxy com.apple.Maps.mapspushd
1⤵
PID:573

/System/Library/CoreServices/mapspushd
/System/Library/CoreServices/mapspushd
1⤵
PID:573

/usr/libexec/xpcproxy
xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
1⤵
PID:574

/usr/libexec/neagent
/usr/libexec/neagent
1⤵
PID:574

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:587

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:587

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
42B

MD5
ce7f5b3d4bfc7b4b0da6a06dccc515f2

SHA1
ce657a52a052a3aaf534ecfbf7cbdde4ee334c10

SHA256
9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1

SHA512
db9de6afa0e14c347aa0988a985b8a453ef133a2413c03bae0fab48bda34d4f9a488db104837a386bb65c393e8f11b1ed4856b211c1c186423649c147d6aabfb

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
102B

MD5
41531bfeb1fcaa0616c0cac52bb384d3

SHA1
4c17da98d22bc143f3ce373027ed8c9088a1d35d

SHA256
e011a72bbc74022b95a19b372a056dea8fc8a79528ec31ce0187a0192460c842

SHA512
20ce2edfe1860d8d79350ba8646ec6cf269aaba05f144fd57388c06ddb7db2e8248729c6775932400e3cd07759b4bf99a41bc3b83f17601814214239eb274325

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
81B

MD5
520bb9b65b89f03050030e5a985b9cd1

SHA1
91defba6d4540d4c8ede177730d104d747e8f57b

SHA256
6bb23965fd46b9ffe67a1cdb2144943543894e063c05db3a4de54e94b84968a0

SHA512
81eebb3eda761a9ecc94aa9564deab4d476522d94025ec19e002e91b12b7fbf2bffda23e7c393c09cb91b6ecd953ec1bf39ef5f787058b70289a5a5d777f0cf6

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
126B

MD5
52ef57acdaa153c35594e46bde4fe42c

SHA1
c2a5b1748aa61c311b670ef319d92663e3f92b00

SHA256
58add3e6d1d91409a9ddd9bb9b7cb173f3ec1162905d907839ab007e43cf2d2a

SHA512
defea7dd6200a17dbf0b619e16efb2919dc14199e7f3cb6755b4e5f1fdc8fb2942fa9f7c8c4c19d9026acb0c64a7df0462c7e10685c7482e710e94ed15964209

Download Submit
/Users/run/Library/Caches/GeoServices/ActiveTileGroup.pbd

Filesize
124KB

MD5
4f2cd7ddf40cd736bf3aa2c902df71f2

SHA1
f7f693be6b53c77dd47366793631032913790391

SHA256
8cc8f10f53b5539a10be56ace36195632730e62a6a7e6442e677c4bf53079ff1

SHA512
1be8f1c690e68968763cfa9577a7ff8a91048db2ce716f0f0de71450526d3a679b089b474068b1a7fdf684da9f006ebf3792a3e818530a29a040e930ba9a8d4b

Download Submit
/Users/run/Library/Caches/GeoServices/Resources/altitude-1188.xml

Filesize
157KB

MD5
3e6423b24f263da56088a101653606cd

SHA1
7c43adc6c23442858bf0dcdf84b5a08323fba317

SHA256
95e4aa9570e1acd3de701ac19c395d80a710275d6e052c598c09cc1ed710c398

SHA512
3f85d2f77102790e8ee82c1f8797c754167a79af91dfdd5377e7681370f01540234017eb24be89cc7a4da5e70005bf35b069d21f5bf70cc59efe1abd6dd8c255

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads