Overview
overview
4Static
static
1ParallelsD...in.vbs
macos-10.15-amd64
1ParallelsD..._dylib
macos-10.15-amd64
1ParallelsD....dylib
macos-10.15-amd64
1ParallelsD...70.dmg
macos-10.15-amd64
1Parallels ...cOS/7z
macos-10.15-amd64
1Parallels ...vm_app
macos-10.15-amd64
1Parallels ...ervice
macos-10.15-amd64
1Parallels ...ervice
macos-10.15-amd64
1Parallels ...ed.vbs
macos-10.15-amd64
4Parallels ...vm_app
macos-10.15-amd64
1Parallels ...ttool2
macos-10.15-amd64
1Parallels ....dylib
macos-10.15-amd64
1Parallels ....dylib
macos-10.15-amd64
1Parallels ...nt_app
macos-10.15-amd64
1Parallels ...onvert
macos-10.15-amd64
1Parallels ...k_tool
macos-10.15-amd64
1Parallels ...sd2iso
macos-10.15-amd64
1Parallels ...daemon
macos-10.15-amd64
1Parallels ..._users
macos-10.15-amd64
1Parallels ...helper
macos-10.15-amd64
1Parallels ..._mkiso
macos-10.15-amd64
1Parallels ..._naptd
macos-10.15-amd64
1Parallels ..._start
macos-10.15-amd64
1Parallels ...nplace
macos-10.15-amd64
1Parallels ...rf_ctl
macos-10.15-amd64
1Parallels ...ps2pdf
macos-10.15-amd64
1Parallels ...spaces
macos-10.15-amd64
1Resubmissions
18/03/2024, 20:43
240318-zhqdxahg22 4Analysis
-
max time kernel
134s -
max time network
173s -
platform
macos-10.15_amd64 -
resource
macos-20240214-en -
resource tags
arch:amd64arch:i386image:macos-20240214-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
18/03/2024, 20:43
Static task
static1
Behavioral task
behavioral1
Sample
ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/main.vbs
Resource
macos-20240214-en
Behavioral task
behavioral2
Sample
ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/insert_dylib
Resource
macos-20240214-en
Behavioral task
behavioral3
Sample
ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/libInjectLib.dylib
Resource
macos-20240214-en
Behavioral task
behavioral4
Sample
ParallelsDesktop-19.0.0-54570/ParallelsDesktop-19.0.0-54570.dmg
Resource
macos-20240214-en
Behavioral task
behavioral5
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/7z
Resource
macos-20240214-en
Behavioral task
behavioral6
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Mac VM.app/Contents/MacOS/prl_macvm_app
Resource
macos-20240214-en
Behavioral task
behavioral7
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Service
Resource
macos-20240214-en
Behavioral task
behavioral8
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Service.app/Contents/MacOS/prl_disp_service
Resource
macos-20240214-en
Behavioral task
behavioral9
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Service.app/Contents/Resources/Unattended.vbs
Resource
macos-20240214-en
Behavioral task
behavioral10
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels VM.app/Contents/MacOS/prl_vm_app
Resource
macos-20240214-en
Behavioral task
behavioral11
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/inittool2
Resource
macos-20240214-en
Behavioral task
behavioral12
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitor.dylib
Resource
macos-20240214-en
Behavioral task
behavioral13
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitorArm.dylib
Resource
macos-20240214-en
Behavioral task
behavioral14
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_client_app
Resource
macos-20240214-en
Behavioral task
behavioral15
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_convert
Resource
macos-20240214-en
Behavioral task
behavioral16
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_disk_tool
Resource
macos-20240214-en
Behavioral task
behavioral17
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_esd2iso
Resource
macos-20240214-en
Behavioral task
behavioral18
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon
Resource
macos-20240214-en
Behavioral task
behavioral19
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_ls_users
Resource
macos-20240214-en
Behavioral task
behavioral20
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_macvm_helper
Resource
macos-20240214-en
Behavioral task
behavioral21
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_mkiso
Resource
macos-20240214-en
Behavioral task
behavioral22
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_naptd
Resource
macos-20240214-en
Behavioral task
behavioral23
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_net_start
Resource
macos-20240214-en
Behavioral task
behavioral24
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_packer_inplace
Resource
macos-20240214-en
Behavioral task
behavioral25
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_perf_ctl
Resource
macos-20240214-en
Behavioral task
behavioral26
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_ps2pdf
Resource
macos-20240214-en
Behavioral task
behavioral27
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_switchspaces
Resource
macos-20240214-en
General
-
Target
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon
-
Size
199KB
-
MD5
eeaed9757c8e138d02b11985c42f8ca2
-
SHA1
9f6d5e996a8c78d997e9892c8d7034357a79580d
-
SHA256
f56f63e71f1a004491f9ee7943164f09bfece110b4b06daa5d83e3b2ce1c037e
-
SHA512
9492dcff2ba02ba42cfd135d4f7b73ae1f87334746cd3d30f0f1b4252d357ae890819e33100387601975d69b5d6ad3cb83aff77df42f8d87e90f4066e99a8b10
-
SSDEEP
768:5xNnu9c/t3tNL8KqGab8q8y4gJfF5IM9r//CwwF8PFk0qGab8:pf/t3DLyGKg8LICr//Cwk0FWGK
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon\""1⤵PID:577
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon\""1⤵PID:577
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon"1⤵PID:577
-
/bin/zsh/bin/zsh -c "/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon"2⤵PID:578
-
-
/Users/run/Parallels/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon2⤵PID:578
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:579
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:579
-
/usr/libexec/xpcproxyxpcproxy com.apple.icloud.findmydeviced1⤵PID:589
-
/usr/libexec/findmydeviced/usr/libexec/findmydeviced1⤵PID:589
-
/usr/libexec/xpcproxyxpcproxy com.apple.pbs1⤵PID:597
-
/System/Library/CoreServices/pbs/System/Library/CoreServices/pbs1⤵PID:597
-
/usr/libexec/xpcproxyxpcproxy com.apple.tailspind1⤵PID:617
-
/usr/libexec/tailspind/usr/libexec/tailspind1⤵PID:617
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:620
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:620