Overview
overview
4Static
static
1ParallelsD...in.vbs
macos-10.15-amd64
1ParallelsD..._dylib
macos-10.15-amd64
1ParallelsD....dylib
macos-10.15-amd64
1ParallelsD...70.dmg
macos-10.15-amd64
1Parallels ...cOS/7z
macos-10.15-amd64
1Parallels ...vm_app
macos-10.15-amd64
1Parallels ...ervice
macos-10.15-amd64
1Parallels ...ervice
macos-10.15-amd64
1Parallels ...ed.vbs
macos-10.15-amd64
4Parallels ...vm_app
macos-10.15-amd64
1Parallels ...ttool2
macos-10.15-amd64
1Parallels ....dylib
macos-10.15-amd64
1Parallels ....dylib
macos-10.15-amd64
1Parallels ...nt_app
macos-10.15-amd64
1Parallels ...onvert
macos-10.15-amd64
1Parallels ...k_tool
macos-10.15-amd64
1Parallels ...sd2iso
macos-10.15-amd64
1Parallels ...daemon
macos-10.15-amd64
1Parallels ..._users
macos-10.15-amd64
1Parallels ...helper
macos-10.15-amd64
1Parallels ..._mkiso
macos-10.15-amd64
1Parallels ..._naptd
macos-10.15-amd64
1Parallels ..._start
macos-10.15-amd64
1Parallels ...nplace
macos-10.15-amd64
1Parallels ...rf_ctl
macos-10.15-amd64
1Parallels ...ps2pdf
macos-10.15-amd64
1Parallels ...spaces
macos-10.15-amd64
1Resubmissions
18-03-2024 20:43
240318-zhqdxahg22 4Analysis
-
max time kernel
13s -
max time network
34s -
platform
macos-10.15_amd64 -
resource
macos-20240214-en -
resource tags
arch:amd64arch:i386image:macos-20240214-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
18-03-2024 20:43
Static task
static1
Behavioral task
behavioral1
Sample
ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/main.vbs
Resource
macos-20240214-en
Behavioral task
behavioral2
Sample
ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/insert_dylib
Resource
macos-20240214-en
Behavioral task
behavioral3
Sample
ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/libInjectLib.dylib
Resource
macos-20240214-en
Behavioral task
behavioral4
Sample
ParallelsDesktop-19.0.0-54570/ParallelsDesktop-19.0.0-54570.dmg
Resource
macos-20240214-en
Behavioral task
behavioral5
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/7z
Resource
macos-20240214-en
Behavioral task
behavioral6
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Mac VM.app/Contents/MacOS/prl_macvm_app
Resource
macos-20240214-en
Behavioral task
behavioral7
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Service
Resource
macos-20240214-en
Behavioral task
behavioral8
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Service.app/Contents/MacOS/prl_disp_service
Resource
macos-20240214-en
Behavioral task
behavioral9
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels Service.app/Contents/Resources/Unattended.vbs
Resource
macos-20240214-en
Behavioral task
behavioral10
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/Parallels VM.app/Contents/MacOS/prl_vm_app
Resource
macos-20240214-en
Behavioral task
behavioral11
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/inittool2
Resource
macos-20240214-en
Behavioral task
behavioral12
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitor.dylib
Resource
macos-20240214-en
Behavioral task
behavioral13
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/libMonitorArm.dylib
Resource
macos-20240214-en
Behavioral task
behavioral14
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_client_app
Resource
macos-20240214-en
Behavioral task
behavioral15
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_convert
Resource
macos-20240214-en
Behavioral task
behavioral16
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_disk_tool
Resource
macos-20240214-en
Behavioral task
behavioral17
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_esd2iso
Resource
macos-20240214-en
Behavioral task
behavioral18
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_launchdaemon
Resource
macos-20240214-en
Behavioral task
behavioral19
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_ls_users
Resource
macos-20240214-en
Behavioral task
behavioral20
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_macvm_helper
Resource
macos-20240214-en
Behavioral task
behavioral21
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_mkiso
Resource
macos-20240214-en
Behavioral task
behavioral22
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_naptd
Resource
macos-20240214-en
Behavioral task
behavioral23
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_net_start
Resource
macos-20240214-en
Behavioral task
behavioral24
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_packer_inplace
Resource
macos-20240214-en
Behavioral task
behavioral25
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_perf_ctl
Resource
macos-20240214-en
Behavioral task
behavioral26
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_ps2pdf
Resource
macos-20240214-en
Behavioral task
behavioral27
Sample
Parallels Desktop 19/Parallels Desktop.app/Contents/MacOS/prl_switchspaces
Resource
macos-20240214-en
General
-
Target
ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/libInjectLib.dylib
-
Size
356KB
-
MD5
1a4c3aafe1ae0c39344862fc1464982e
-
SHA1
57b5fafa6fb68e72791436fd9e8d805e0a00c822
-
SHA256
dbac49c0b20e4b150a9bce3f301ead62ce7a9cc548e210109714ed5a5956a8cf
-
SHA512
27f98fbdfda39d628502ea790c121652256dacdcdb2307990d10fc2bf8edb25bff99095b56b82b5ecc707479d10b7f5eb7ee6c298bcd90de3ce8e73add1671c6
-
SSDEEP
3072:MB8tXvOqlJEzUFYWKkMoeDR+GyYSRrvXxTznw+pNriPFnO9Y8oeDdlm0e:MB8tfvlWRsNZ/CFx+I
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/libInjectLib.dylib\""1⤵PID:573
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/libInjectLib.dylib\""1⤵PID:573
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/libInjectLib.dylib1⤵PID:573
-
/bin/zsh/bin/zsh -c /Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/libInjectLib.dylib2⤵PID:574
-
-
/Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/libInjectLib.dylib/Users/run/ParallelsDesktop-19.0.0-54570/Crack_Parallels_v19_SIP_enabled/tool/libInjectLib.dylib2⤵PID:574
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.secinitd1⤵PID:575
-
/usr/libexec/secinitd/usr/libexec/secinitd1⤵PID:575
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:576
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:576
-
/usr/libexec/xpcproxyxpcproxy com.apple.icloud.findmydeviced1⤵PID:585
-
/usr/libexec/findmydeviced/usr/libexec/findmydeviced1⤵PID:585
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
47KB
MD50e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA5121dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20
-
Filesize
4KB
MD5d3a1859e6ec593505cc882e6def48fc8
SHA1f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA2563ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
SHA512ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818