Overview
overview
4Static
static
1Beeper 3.1...64.dmg
macos-10.15-amd64
1Beeper 3.1..._store
macos-10.15-amd64
4Beeper 3.1...n.icns
macos-10.15-amd64
1Beeper 3.1...ources
macos-10.15-amd64
1Beeper 3.1...fo.xml
macos-10.15-amd64
1Beeper 3.1...Beeper
macos-10.15-amd64
1Beeper 3.1...kgInfo
macos-10.15-amd64
1Beeper 3.1...te.yml
macos-10.15-amd64
4Beeper 3.1...p.asar
macos-10.15-amd64
4Beeper 3.1...r.node
macos-10.15-amd64
4Beeper 3.1...x.node
macos-10.15-amd64
4Beeper 3.1...tierrc
macos-10.15-amd64
4Beeper 3.1...ICENSE
macos-10.15-amd64
1Beeper 3.1...d.node
macos-10.15-amd64
Beeper 3.1...uild.d
macos-10.15-amd64
4Beeper 3.1...uild.d
macos-10.15-amd64
4Beeper 3.1...uild.d
macos-10.15-amd64
4Beeper 3.1...uild.d
macos-10.15-amd64
4Beeper 3.1...s.node
macos-10.15-amd64
Beeper 3.1...ython3
macos-10.15-amd64
4Beeper 3.1...cts.mm
macos-10.15-amd64
4Beeper 3.1...dex.js
macos-10.15-amd64
4Beeper 3.1...kefile
macos-10.15-amd64
4Beeper 3.1...e.json
macos-10.15-amd64
4Beeper 3.1...n.icns
macos-10.15-amd64
4Beeper 3.1...on.png
macos-10.15-amd64
4Beeper 3.1...on.png
macos-10.15-amd64
4Beeper 3.1...ad.png
macos-10.15-amd64
4Beeper 3.1...on.png
macos-10.15-amd64
4Beeper 3.1...ad.png
macos-10.15-amd64
4Beeper 3.1...versal
macos-10.15-amd64
4Beeper 3.1...app.js
macos-10.15-amd64
4Analysis
- max time kernel
149s - max time network
150s - platform
macos-10.15_amd64 - resource
macos-20240214-en - resource tags
arch:amd64arch:i386image:macos-20240214-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
25/03/2024, 09:46
Static task
static1
Behavioral task
behavioral1
Sample
Beeper 3.101.24 - x64.dmg
Resource
macos-20240214-en
Behavioral task
behavioral2
Sample
Beeper 3.101.24/.ds_store
Resource
macos-20240214-en
Behavioral task
behavioral3
Sample
Beeper 3.101.24/.VolumeIcon.icns
Resource
macos-20240214-en
Behavioral task
behavioral4
Sample
Beeper 3.101.24/Beeper.app/Contents/CodeResources
Resource
macos-20240214-en
Behavioral task
behavioral5
Sample
Beeper 3.101.24/Beeper.app/Contents/Info.xml
Resource
macos-20240214-en
Behavioral task
behavioral6
Sample
Beeper 3.101.24/Beeper.app/Contents/MacOS/Beeper
Resource
macos-20240214-en
Behavioral task
behavioral7
Sample
Beeper 3.101.24/Beeper.app/Contents/PkgInfo
Resource
macos-20240214-en
Behavioral task
behavioral8
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app-update.yml
Resource
macos-20240214-en
Behavioral task
behavioral9
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar
Resource
macos-20240214-en
Behavioral task
behavioral10
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/.hak/hakModules/keytar/build/Release/keytar.node
Resource
macos-20240214-en
Behavioral task
behavioral11
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/.hak/hakModules/matrix-seshat/native/index.node
Resource
macos-20240214-en
Behavioral task
behavioral12
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/node_modules/node-mac-contacts/.prettierrc
Resource
macos-20240214-en
Behavioral task
behavioral13
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/node_modules/node-mac-contacts/LICENSE
Resource
macos-20240214-en
Behavioral task
behavioral14
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/node_modules/node-mac-contacts/bin/d.node
Resource
macos-20240214-en
Behavioral task
behavioral15
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/node_modules/node-mac-contacts/build.d
Resource
macos-20240214-en
Behavioral task
behavioral16
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/node_modules/node-mac-contacts/build.d
Resource
macos-20240214-en
Behavioral task
behavioral17
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/node_modules/node-mac-contacts/build.d
Resource
macos-20240214-en
Behavioral task
behavioral18
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/node_modules/node-mac-contacts/build.d
Resource
macos-20240214-en
Behavioral task
behavioral19
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/node_modules/node-mac-contacts/build/Debug/contacts.node
Resource
macos-20240214-en
Behavioral task
behavioral20
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/node_modules/node-mac-contacts/build/node_gyp_bins/python3
Resource
macos-20240214-en
Behavioral task
behavioral21
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/node_modules/node-mac-contacts/contacts.mm
Resource
macos-20240214-en
Behavioral task
behavioral22
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/node_modules/node-mac-contacts/index.js
Resource
macos-20240214-en
Behavioral task
behavioral23
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/node_modules/node-mac-contacts/node-addon-api/node_api.makefile
Resource
macos-20240214-en
Behavioral task
behavioral24
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/app.asar.unpacked/node_modules/node-mac-contacts/package.json
Resource
macos-20240214-en
Behavioral task
behavioral25
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/icon.icns
Resource
macos-20240214-en
Behavioral task
behavioral26
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/icons/beta-icon.png
Resource
macos-20240214-en
Behavioral task
behavioral27
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/icons/icon.png
Resource
macos-20240214-en
Behavioral task
behavioral28
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/icons/win/beta-icon-unread.png
Resource
macos-20240214-en
Behavioral task
behavioral29
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/icons/win/beta-icon.png
Resource
macos-20240214-en
Behavioral task
behavioral30
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/icons/win/icon-unread.png
Resource
macos-20240214-en
Behavioral task
behavioral31
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/mac-registration-provider/mac-registration-provider-universal
Resource
macos-20240214-en
Behavioral task
behavioral32
Sample
Beeper 3.101.24/Beeper.app/Contents/Resources/webapp.js
Resource
macos-20240214-en
General
- Target Beeper 3.101.24/Beeper.app/Contents/MacOS/Beeper
- Size 37KB
- Sample240325-lrwqdsfd8v
- SHA256 cbbdf656e179b98154adee06a075bd387bc30f4a13261d12755a6950bb9b0bcb
- MD5 394057745ffec91fb71ab4f599b35ed4
- SHA1 1bc04d6384eac2c1656425bc00f0cdb9b2dfe2e3
- SHA512 901dc14e439dac4e5b0f1336d200ccf82754c4a85de8b8721fe855b81a8bc34fd1328ab646eca685f536259218509273caba33d84c2c055802057a56c6484e07
- SSDEEP 384:gX+iSKeJr5P3bR3r+Q8frM9r42EPrYrSrNab8er:guiSDrN3T8iLQab8
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Beeper 3.101.24/Beeper.app/Contents/MacOS/Beeper\""1⤵PID:555
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Beeper 3.101.24/Beeper.app/Contents/MacOS/Beeper\""1⤵PID:555
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Beeper 3.101.24/Beeper.app/Contents/MacOS/Beeper"1⤵PID:555
-
/bin/zsh/bin/zsh -c "/Users/run/Beeper 3.101.24/Beeper.app/Contents/MacOS/Beeper"2⤵PID:556
-
-
/Users/run/Beeper/Users/run/Beeper 3.101.24/Beeper.app/Contents/MacOS/Beeper2⤵PID:556
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:558
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:558
-
/usr/libexec/xpcproxyxpcproxy com.apple.nehelper1⤵PID:559
-
/usr/libexec/nehelper/usr/libexec/nehelper1⤵PID:559
-
/usr/libexec/xpcproxyxpcproxy com.apple.pbs1⤵PID:565
-
/System/Library/CoreServices/pbs/System/Library/CoreServices/pbs1⤵PID:565
-
/usr/libexec/xpcproxyxpcproxy com.apple.geod1⤵PID:572
-
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod1⤵PID:572
-
/usr/libexec/xpcproxyxpcproxy com.apple.AddressBook.ContactsAccountsService1⤵PID:576
-
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService1⤵PID:576
-
/usr/libexec/xpcproxyxpcproxy com.apple.routined1⤵PID:577
-
/usr/libexec/routined/usr/libexec/routined LAUNCHED_BY_LAUNCHD1⤵PID:577
-
/usr/libexec/xpcproxyxpcproxy com.apple.Maps.mapspushd1⤵PID:578
-
/System/Library/CoreServices/mapspushd/System/Library/CoreServices/mapspushd1⤵PID:578
-
/usr/libexec/xpcproxyxpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A1⤵PID:581
-
/usr/libexec/neagent/usr/libexec/neagent1⤵PID:581
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:589
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:589
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /Library/Preferences/com.apple.networkextension.uuidcache.plist
- Size 42B
- SHA256 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1
- MD5 ce7f5b3d4bfc7b4b0da6a06dccc515f2
- SHA1 ce657a52a052a3aaf534ecfbf7cbdde4ee334c10
- SHA512 db9de6afa0e14c347aa0988a985b8a453ef133a2413c03bae0fab48bda34d4f9a488db104837a386bb65c393e8f11b1ed4856b211c1c186423649c147d6aabfb
- MD5 SHA1 SHA512
- Path /Library/Preferences/com.apple.networkextension.uuidcache.plist
- Size 106B
- SHA256 17e96efaf7f2e45e407a3c68fb57b78f09dea6fc1edf3732b888be4a4eadd468
- MD5 a60a7bcfc47eacaa66e5e3d701d3ba80
- SHA1 7093ffc5beca33187c18461c7ff3259a1781ae35
- SHA512 58736bd680d6c7a25b8d7db08fd4a258cf761dbaa44a5ece0c2b813ab12c20dc213ab40844dfc780687945cf2459f549f1a38bf3da16c5c332756f3b53e1c3a5
- MD5 SHA1 SHA512
- Path /Library/Preferences/com.apple.networkextension.uuidcache.plist
- Size 147B
- SHA256 c6a15fb293a7994c87cb4665fa076b4804c15a7f17753d267b6e271b036457dc
- MD5 a6ed424e1135465fac072dc8c30be6a0
- SHA1 8cb5811cfe6611074f7e01b8b9a533aa7bed4432
- SHA512 d6dc5f49efacc0bea1d388e490c2e1283f6a6f42829e1ab30ec18b0ad35faf44e21d7780b84b5a2ebaff1e79da6fdc090bc547990b513cb311db82fb54cd8972
- MD5 SHA1 SHA512
- Path /Library/Preferences/com.apple.networkextension.uuidcache.plist
- Size 167B
- SHA256 c538c601d32e3052f7b1abeba70b33930f59b71d07abeb63578e4340334fc4da
- MD5 54ac2dfc3277cc71d095814696c9d295
- SHA1 8f0d1dfbdff79cd6d57bc961c6c3fd097ba48893
- SHA512 9c6feb5711798bb03f566cfdce44150d28e9ac7cf6b6668aef9e9293b367b91a00d69db06d07198a7e2e3c8ba161ef2238e143bea6b1957cc9298ce8e9e7009b
- MD5 SHA1 SHA512
- Path /Users/run/Library/Caches/GeoServices/ActiveTileGroup.pbd
- Size 124KB
- SHA256 3e11c25b0256e8fa9e97155068f9b02078163f634247d18d71a360d15220c4ed
- MD5 ec389ace982268f140b67a4160a604c2
- SHA1 1115cd4098221733ca052c78940faf4faaba5f56
- SHA512 044f4dfdf2c10fd52643a1f4dea536e5e7a9468f0859ec6d876101f710e4afa1a05a7a8f240c13d54b7dd2f725034c347f656bd79d82f3221f5129396bf4644e
- SSDEEP 3072:yG1q2GBeOCpVwEJcrhslHsj0YgN0fT7V/CEF7tPGqpyqA7icNCRqcV:yGq2GBeOCsralMj0Zy7tOiHV
- MD5 SHA1 SHA512 SSDEEP
- Path /Users/run/Library/Caches/GeoServices/Resources/altitude-1249.xml
- Size 160KB
- SHA256 9320e397ccc5577acc65da1f4cbafea31c1d802014ec4b4459c628b449414fdc
- MD5 c0b8e6fb70a16991ed49a487448cd106
- SHA1 71f21321168dc466e7f64eb2c2516cecb1a931c3
- SHA512 ae0c5fb1b29d7f80511a846f8c3db54d018aba7b9314792e63d6844ded948610aed6aeac4388dfbfd8530dbaaeae4cf479c10f52746bab866509d71217111ba1
- SSDEEP 768:SGSaD5wrMhcpPXOqeyuwnW8arz4DZKrj45vJq2ZW/gt8VxtaxU3B4c4lWDSr/g22:SGSsJZyXba6lU6CDTwlHEkmXC1A
- MD5 SHA1 SHA512 SSDEEP