Analysis
-
max time kernel
70s -
max time network
169s -
platform
macos-10.15_amd64 -
resource
macos-20240410-en -
resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
17/04/2024, 16:01
Static task
static1
Behavioral task
behavioral1
Sample
Firefox 105.0.3.dmg
Resource
macos-20240410-en
Behavioral task
behavioral2
Sample
3.apple_free
Resource
macos-20240410-en
Behavioral task
behavioral3
Sample
Apple.apple_partition_map
Resource
macos-20240410-en
Behavioral task
behavioral4
Sample
Mac_OS_X.apple_hfsx
Resource
macos-20240410-en
Behavioral task
behavioral5
Sample
Macintosh.apple_driver_atapi
Resource
macos-20240410-en
General
-
Target
3.apple_free
-
Size
5KB
-
MD5
32ca18808933aa12e979375d07048a11
-
SHA1
ec8d8db07ace21ae014c4d7dbe42297dfe61976a
-
SHA256
a11937f356a9b0ba592c82f5290bac8016cb33a3f9bc68d3490147c158ebb10d
-
SHA512
1f1e6f098e99bb0ab52c3142f0fb545b00470d267823d44fd609fdaae1a6f45fb437de931fa16bbb4a702c0cba7abb9954b737ff4edb30f16ae39a2c67ee6bb7
-
SSDEEP
3::
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/3.apple_free\""1⤵PID:514
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/3.apple_free\""1⤵PID:514
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/3.apple_free1⤵PID:514
-
/bin/zsh/bin/zsh -c /Users/run/3.apple_free2⤵PID:515
-
-
/Users/run/3.apple_free/Users/run/3.apple_free2⤵PID:515
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:517
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:517