Resubmissions

18/03/2024, 20:43

240318-zhqdxahg22 4

Analysis

  • max time kernel
    4s
  • max time network
    28s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240214-en
  • resource tags

    arch:amd64arch:i386image:macos-20240214-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    18/03/2024, 20:43

General

  • Target

    ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/main.vbs

  • Size

    6KB

  • MD5

    b2b1cf4d6c1fa5613ea9472860a52303

  • SHA1

    afc0711f47d27b361a89285e4a846ed4de2241eb

  • SHA256

    d0c42e0f4629663e426bf74487dc50519f66ac2cb1eb076d091754eda492cbc4

  • SHA512

    b23933fcb48af52b0c9754cbae6d1d558ade142717ab8bf8d53f5c0699674cf50389093777b6b763c612611fd0e695ebf95ccd12d5cdecb43f51c5897a67be4e

  • SSDEEP

    192:/0Y4KsmE7/7qVayJgS5i/+2mXIirrE9PPF9fOeSPRkbHaT:1ST+/JgS5irmEkPRkTY

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/main.vbs\""
    1⤵
      PID:538
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/main.vbs\""
      1⤵
        PID:538
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/main.vbs
        1⤵
          PID:538
          • /bin/zsh
            /bin/zsh -c /Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/main.vbs
            2⤵
              PID:539
            • /Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/main.vbs
              /Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/main.vbs
              2⤵
                PID:539
              • /bin/sh
                sh /Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/main.vbs
                2⤵
                  PID:539
                • /bin/bash
                  sh /Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/main.vbs
                  2⤵
                    PID:539
                • /usr/bin/pluginkit
                  /usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync
                  1⤵
                    PID:545
                  • /usr/sbin/spctl
                    /usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdater4B941C11/OneDrive.app
                    1⤵
                      PID:546

                    Network

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads