56ca012bae180f472b3a5b1cf199fef75c39d077a5e10cd82c352c4ab315360e | Triage

Submit
Reports

Overview

overview

4

Static

static

1

ParallelsD...in.vbs

macos-10.15-amd64

1

ParallelsD..._dylib

macos-10.15-amd64

1

ParallelsD....dylib

macos-10.15-amd64

1

ParallelsD...70.dmg

macos-10.15-amd64

1

Parallels ...cOS/7z

macos-10.15-amd64

1

Parallels ...vm_app

macos-10.15-amd64

1

Parallels ...ervice

macos-10.15-amd64

1

Parallels ...ervice

macos-10.15-amd64

1

Parallels ...ed.vbs

macos-10.15-amd64

4

Parallels ...vm_app

macos-10.15-amd64

1

Parallels ...ttool2

macos-10.15-amd64

1

Parallels ....dylib

macos-10.15-amd64

1

Parallels ....dylib

macos-10.15-amd64

1

Parallels ...nt_app

macos-10.15-amd64

1

Parallels ...onvert

macos-10.15-amd64

1

Parallels ...k_tool

macos-10.15-amd64

1

Parallels ...sd2iso

macos-10.15-amd64

1

Parallels ...daemon

macos-10.15-amd64

1

Parallels ..._users

macos-10.15-amd64

1

Parallels ...helper

macos-10.15-amd64

1

Parallels ..._mkiso

macos-10.15-amd64

1

Parallels ..._naptd

macos-10.15-amd64

1

Parallels ..._start

macos-10.15-amd64

1

Parallels ...nplace

macos-10.15-amd64

1

Parallels ...rf_ctl

macos-10.15-amd64

1

Parallels ...ps2pdf

macos-10.15-amd64

1

Parallels ...spaces

macos-10.15-amd64

1

Resubmissions

18-03-2024 20:43

240318-zhqdxahg22 4

Analysis

max time kernel
123s
max time network
178s
platform
macos-10.15_amd64
resource
macos-20240214-en
resource tags

arch:amd64arch:i386image:macos-20240214-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
18-03-2024 20:43

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/main.vbs

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/insert_dylib

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/libInjectLib.dylib

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

ParallelsDesktop-19.0.0-54570/ParallelsDesktop-19.0.0-54570.dmg

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/7z

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Mac VM.app/Contents/MacOS/prl_macvm_app

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Service

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Service.app/Contents/MacOS/prl_disp_service

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Service.app/Contents/Resources/Unattended.vbs

Resource

macos-20240214-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels VM.app/Contents/MacOS/prl_vm_app

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/inittool2

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitor.dylib

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitorArm.dylib

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_client_app

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_convert

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_disk_tool

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_esd2iso

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_ls_users

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_macvm_helper

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_mkiso

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_naptd

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_net_start

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_packer_inplace

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_perf_ctl

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_ps2pdf

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_switchspaces

Resource

macos-20240214-en

macos-10.15-amd64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_mkiso
Size

387KB
MD5

dc17460609d81b32190c2fbfdd6901a6
SHA1

0e3540d471f0b83ce5790a39ca7a5d8460179852
SHA256

205916ea9f2a2206c2d85a1a7a969f2f5651c1326c70520d6a870d0b0ec2d6e9
SHA512

fb53708758d824c1852233abbe2fa8abe0ffd6accb807836ab36ee041ec02467b514a6372c1b2c2d5e6be803ff4f0b0606a961fb090ca32fb6595254c6daa7a4
SSDEEP

6144:JaxgO4DU38061r8hjU9al2fEpAXEbmCz/fTBfCtBVRkBxiAIkG:gxQYJ61rcUYl21ESCz3TNYe

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_mkiso\""
1⤵
PID:574

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_mkiso\""
1⤵
PID:574

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_mkiso"
1⤵
PID:574
- /bin/zsh
  /bin/zsh -c "/Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_mkiso"
  2⤵
  PID:575
- /Users/run/Parallels
  /Users/run/Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_mkiso
  2⤵
  PID:575

/usr/libexec/xpcproxy
xpcproxy com.apple.icloud.findmydeviced
1⤵
PID:576

/usr/libexec/findmydeviced
/usr/libexec/findmydeviced
1⤵
PID:576

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:577

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:577

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:587

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:587

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:588

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:588

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:589

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:589

/usr/bin/pluginkit
/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync
1⤵
PID:594

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdater6BDB2703/OneDrive.app
1⤵
PID:595

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:617

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:617

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy