Overview
overview
4Static
static
3Bambu_Stud...51.exe
macos-10.15-amd64
4resources/...x.html
macos-10.15-amd64
4resources/...mon.js
macos-10.15-amd64
4resources/...api.js
macos-10.15-amd64
4resources/...ome.js
macos-10.15-amd64
4resources/...min.js
macos-10.15-amd64
4resources/...min.js
macos-10.15-amd64
4resources/...on2.js
macos-10.15-amd64
4resources/...umd.js
macos-10.15-amd64
4resources/...umd.js
macos-10.15-amd64
4resources/...api.js
macos-10.15-amd64
4resources/...ive.js
macos-10.15-amd64
4resources/...ent.js
macos-10.15-amd64
4resources/...ule.js
macos-10.15-amd64
4resources/...ams.js
macos-10.15-amd64
4resources/...ist.js
macos-10.15-amd64
4resources/...ils.js
macos-10.15-amd64
4resources/...lar.js
macos-10.15-amd64
4resources/...lar.js
macos-10.15-amd64
4resources/...lar.js
macos-10.15-amd64
4resources/...lar.js
macos-10.15-amd64
4resources/...int.js
macos-10.15-amd64
4resources/...dex.js
macos-10.15-amd64
4resources/...int.js
macos-10.15-amd64
4resources/...dex.js
macos-10.15-amd64
4resources/...ses.js
macos-10.15-amd64
4resources/...dex.js
macos-10.15-amd64
4resources/...ses.js
macos-10.15-amd64
4resources/...ore.js
macos-10.15-amd64
4resources/...lts.js
macos-10.15-amd64
4resources/...ter.js
macos-10.15-amd64
4resources/...dex.js
macos-10.15-amd64
4Analysis
-
max time kernel
140s -
max time network
152s -
platform
macos-10.15_amd64 -
resource
macos-20240410-en -
resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
16-04-2024 21:57
Static task
static1
Behavioral task
behavioral1
Sample
Bambu_Studio_win-v01.08.04.51.exe
Resource
macos-20240410-en
Behavioral task
behavioral2
Sample
resources/web/guide/index.html
Resource
macos-20240410-en
Behavioral task
behavioral3
Sample
resources/web/guide/js/common.js
Resource
macos-20240410-en
Behavioral task
behavioral4
Sample
resources/web/guide/js/globalapi.js
Resource
macos-20240410-en
Behavioral task
behavioral5
Sample
resources/web/guide/js/home.js
Resource
macos-20240410-en
Behavioral task
behavioral6
Sample
resources/web/guide/js/jquery-2.1.1.min.js
Resource
macos-20240410-en
Behavioral task
behavioral7
Sample
resources/web/guide/js/jquery-3.6.0.min.js
Resource
macos-20240410-en
Behavioral task
behavioral8
Sample
resources/web/guide/js/json2.js
Resource
macos-20240410-en
Behavioral task
behavioral9
Sample
resources/web/guide/swiper/angular/bundles/swiper_angular.umd.js
Resource
macos-20240410-en
Behavioral task
behavioral10
Sample
resources/web/guide/swiper/angular/bundles/swiper_angular.umd.js
Resource
macos-20240410-en
Behavioral task
behavioral11
Sample
resources/web/guide/swiper/angular/esm2015/angular/src/public-api.js
Resource
macos-20240410-en
Behavioral task
behavioral12
Sample
resources/web/guide/swiper/angular/esm2015/angular/src/swiper-slide.directive.js
Resource
macos-20240410-en
Behavioral task
behavioral13
Sample
resources/web/guide/swiper/angular/esm2015/angular/src/swiper.component.js
Resource
macos-20240410-en
Behavioral task
behavioral14
Sample
resources/web/guide/swiper/angular/esm2015/angular/src/swiper.module.js
Resource
macos-20240410-en
Behavioral task
behavioral15
Sample
resources/web/guide/swiper/angular/esm2015/angular/src/utils/get-params.js
Resource
macos-20240410-en
Behavioral task
behavioral16
Sample
resources/web/guide/swiper/angular/esm2015/angular/src/utils/params-list.js
Resource
macos-20240410-en
Behavioral task
behavioral17
Sample
resources/web/guide/swiper/angular/esm2015/angular/src/utils/utils.js
Resource
macos-20240410-en
Behavioral task
behavioral18
Sample
resources/web/guide/swiper/angular/esm2015/swiper-angular.js
Resource
macos-20240410-en
Behavioral task
behavioral19
Sample
resources/web/guide/swiper/angular/esm2015/swiper_angular.js
Resource
macos-20240410-en
Behavioral task
behavioral20
Sample
resources/web/guide/swiper/angular/fesm2015/swiper_angular.js
Resource
macos-20240410-en
Behavioral task
behavioral21
Sample
resources/web/guide/swiper/angular/fesm2015/swiper_angular.js
Resource
macos-20240410-en
Behavioral task
behavioral22
Sample
resources/web/guide/swiper/core/breakpoints/getBreakpoint.js
Resource
macos-20240410-en
Behavioral task
behavioral23
Sample
resources/web/guide/swiper/core/breakpoints/index.js
Resource
macos-20240410-en
Behavioral task
behavioral24
Sample
resources/web/guide/swiper/core/breakpoints/setBreakpoint.js
Resource
macos-20240410-en
Behavioral task
behavioral25
Sample
resources/web/guide/swiper/core/check-overflow/index.js
Resource
macos-20240410-en
Behavioral task
behavioral26
Sample
resources/web/guide/swiper/core/classes/addClasses.js
Resource
macos-20240410-en
Behavioral task
behavioral27
Sample
resources/web/guide/swiper/core/classes/index.js
Resource
macos-20240410-en
Behavioral task
behavioral28
Sample
resources/web/guide/swiper/core/classes/removeClasses.js
Resource
macos-20240410-en
Behavioral task
behavioral29
Sample
resources/web/guide/swiper/core/core.js
Resource
macos-20240410-en
Behavioral task
behavioral30
Sample
resources/web/guide/swiper/core/defaults.js
Resource
macos-20240410-en
Behavioral task
behavioral31
Sample
resources/web/guide/swiper/core/events-emitter.js
Resource
macos-20240410-en
Behavioral task
behavioral32
Sample
resources/web/guide/swiper/core/events/index.js
Resource
macos-20240410-en
General
-
Target
Bambu_Studio_win-v01.08.04.51.exe
-
Size
216.6MB
-
MD5
dfd4a19de50a68477edac8dbb25faf9a
-
SHA1
f5d117a3550adee70f3ff2edbf65b375334c79f6
-
SHA256
f911e04176476439bf4f10b4a476627bb3e401025b225eefcb529d8a7d25f5e6
-
SHA512
45a1da9a8182a9e78e8b688e4123ea83ad5ffdd1a17d8a9e86d298b4b01daa5b993d873491859f77c082aedfab67beb72dee64527aff436d0e3198a39f1630e6
-
SSDEEP
3145728:Fz/Hlx62MMm5DdD8q8fbHSb27hjm/n51hqX0ckUDfet0+kfJ4mNoFYeS3A+skw4x:dtxpMMmJ59G+MM5LqX0chD8ayYeF+
Malware Config
Signatures
-
Resource Forking 1 TTPs 2 IoCs
Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.
Processes:
ioc process /System/Library/CoreServices/loginwindow.app/Contents/Resources/LWWeeklyMessageTracer "/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater" -bgcheck
Processes
-
/usr/libexec/xpcproxyxpcproxy com.apple.pluginkit.pkreporter1⤵
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Bambu_Studio_win-v01.08.04.51.exe\""1⤵
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Bambu_Studio_win-v01.08.04.51.exe\""1⤵
-
/usr/libexec/pkreporter/usr/libexec/pkreporter1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.loginwindow.LWWeeklyMessageTracer1⤵
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Bambu_Studio_win-v01.08.04.51.exe1⤵
-
/bin/zsh/bin/zsh -c /Users/run/Bambu_Studio_win-v01.08.04.51.exe2⤵
-
/Users/run/Bambu_Studio_win-v01.08.04.51.exe/Users/run/Bambu_Studio_win-v01.08.04.51.exe2⤵
-
/usr/libexec/xpcproxyxpcproxy com.oracle.java.Java-Updater1⤵
-
/System/Library/CoreServices/loginwindow.app/Contents/Resources/LWWeeklyMessageTracer/System/Library/CoreServices/loginwindow.app/Contents/Resources/LWWeeklyMessageTracer1⤵
-
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater"/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater" -bgcheck1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵