56ca012bae180f472b3a5b1cf199fef75c39d077a5e10cd82c352c4ab315360e | Triage

Submit
Reports

Overview

overview

4

Static

static

1

ParallelsD...in.vbs

macos-10.15-amd64

1

ParallelsD..._dylib

macos-10.15-amd64

1

ParallelsD....dylib

macos-10.15-amd64

1

ParallelsD...70.dmg

macos-10.15-amd64

1

Parallels ...cOS/7z

macos-10.15-amd64

1

Parallels ...vm_app

macos-10.15-amd64

1

Parallels ...ervice

macos-10.15-amd64

1

Parallels ...ervice

macos-10.15-amd64

1

Parallels ...ed.vbs

macos-10.15-amd64

4

Parallels ...vm_app

macos-10.15-amd64

1

Parallels ...ttool2

macos-10.15-amd64

1

Parallels ....dylib

macos-10.15-amd64

1

Parallels ....dylib

macos-10.15-amd64

1

Parallels ...nt_app

macos-10.15-amd64

1

Parallels ...onvert

macos-10.15-amd64

1

Parallels ...k_tool

macos-10.15-amd64

1

Parallels ...sd2iso

macos-10.15-amd64

1

Parallels ...daemon

macos-10.15-amd64

1

Parallels ..._users

macos-10.15-amd64

1

Parallels ...helper

macos-10.15-amd64

1

Parallels ..._mkiso

macos-10.15-amd64

1

Parallels ..._naptd

macos-10.15-amd64

1

Parallels ..._start

macos-10.15-amd64

1

Parallels ...nplace

macos-10.15-amd64

1

Parallels ...rf_ctl

macos-10.15-amd64

1

Parallels ...ps2pdf

macos-10.15-amd64

1

Parallels ...spaces

macos-10.15-amd64

1

Resubmissions

18-03-2024 20:43

240318-zhqdxahg22 4

Analysis

max time kernel
137s
max time network
170s
platform
macos-10.15_amd64
resource
macos-20240214-en
resource tags

arch:amd64arch:i386image:macos-20240214-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
18-03-2024 20:43

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/main.vbs

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/insert_dylib

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/libInjectLib.dylib

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

ParallelsDesktop-19.0.0-54570/ParallelsDesktop-19.0.0-54570.dmg

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/7z

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Mac VM.app/Contents/MacOS/prl_macvm_app

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Service

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Service.app/Contents/MacOS/prl_disp_service

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Service.app/Contents/Resources/Unattended.vbs

Resource

macos-20240214-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels VM.app/Contents/MacOS/prl_vm_app

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/inittool2

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitor.dylib

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitorArm.dylib

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_client_app

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_convert

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_disk_tool

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_esd2iso

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_ls_users

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_macvm_helper

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_mkiso

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_naptd

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_net_start

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_packer_inplace

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_perf_ctl

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_ps2pdf

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_switchspaces

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitor.dylib
Size

1.5MB
MD5

210a6c45d05424c4dd25da9fc7b7cff0
SHA1

d4c15f6577dbbb9f830bfba102e3a5591aea6bb6
SHA256

9d7bd0bc0551742ff17f853c9c64d538f8cd8b1e05c3ff884f729dc4d286f9b9
SHA512

4a49b74893b5d4e85c369bc5b58576a0eada3bfae2fe0d13b1361074baab024d15bdbdba4d6f87bfdd48e0a73eb6d956415a9981234db6cdb3d3f3830a81a15c
SSDEEP

24576:Y9RF2CoxVHAUq8INf9FavtTuOGZG4RYUThxpzQSwALG4:Y9RYCoxNVNwlFfJZvRrTPRQ

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitor.dylib\""
1⤵
PID:572

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitor.dylib\""
1⤵
PID:572

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitor.dylib"
1⤵
PID:572
- /bin/zsh
  /bin/zsh -c "/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitor.dylib"
  2⤵
  PID:573
- /Users/run/Parallels
  /Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitor.dylib
  2⤵
  PID:573

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:574

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:574

/usr/libexec/xpcproxy
xpcproxy com.apple.icloud.findmydeviced
1⤵
PID:580

/usr/libexec/findmydeviced
/usr/libexec/findmydeviced
1⤵
PID:580

/usr/bin/pluginkit
/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync
1⤵
PID:582

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdater6BDB2703/OneDrive.app
1⤵
PID:583

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:587

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:587

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:604

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:604

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app
1⤵
PID:608

/usr/libexec/xpcproxy
xpcproxy com.apple.bird
1⤵
PID:610

/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
1⤵
PID:610

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy