Resubmissions

18/03/2024, 20:43

240318-zhqdxahg22 4

Analysis

  • max time kernel
    134s
  • max time network
    173s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240214-en
  • resource tags

    arch:amd64arch:i386image:macos-20240214-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    18/03/2024, 20:43

General

  • Target

    Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon

  • Size

    199KB

  • MD5

    eeaed9757c8e138d02b11985c42f8ca2

  • SHA1

    9f6d5e996a8c78d997e9892c8d7034357a79580d

  • SHA256

    f56f63e71f1a004491f9ee7943164f09bfece110b4b06daa5d83e3b2ce1c037e

  • SHA512

    9492dcff2ba02ba42cfd135d4f7b73ae1f87334746cd3d30f0f1b4252d357ae890819e33100387601975d69b5d6ad3cb83aff77df42f8d87e90f4066e99a8b10

  • SSDEEP

    768:5xNnu9c/t3tNL8KqGab8q8y4gJfF5IM9r//CwwF8PFk0qGab8:pf/t3DLyGKg8LICr//Cwk0FWGK

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon\""
    1⤵
      PID:577
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon\""
      1⤵
        PID:577
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon"
        1⤵
          PID:577
          • /bin/zsh
            /bin/zsh -c "/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon"
            2⤵
              PID:578
            • /Users/run/Parallels
              /Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon
              2⤵
                PID:578
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.sysmond
              1⤵
                PID:579
              • /usr/libexec/sysmond
                /usr/libexec/sysmond
                1⤵
                  PID:579
                • /usr/libexec/xpcproxy
                  xpcproxy com.apple.icloud.findmydeviced
                  1⤵
                    PID:589
                  • /usr/libexec/findmydeviced
                    /usr/libexec/findmydeviced
                    1⤵
                      PID:589
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.pbs
                      1⤵
                        PID:597
                      • /System/Library/CoreServices/pbs
                        /System/Library/CoreServices/pbs
                        1⤵
                          PID:597
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.tailspind
                          1⤵
                            PID:617
                          • /usr/libexec/tailspind
                            /usr/libexec/tailspind
                            1⤵
                              PID:617
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
                              1⤵
                                PID:620
                              • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                1⤵
                                  PID:620

                                Network

                                MITRE ATT&CK Matrix

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads