93940a8ee07d3a23daef84175f36c95b987fe75944ffd80dfb02f4eb834e1340 | Triage

Submit
Reports

Overview

overview

8

Static

static

1

simac.dmg

macos-10.15-amd64

8

Mac Inform...bg.png

macos-10.15-amd64

1

Mac Inform...edc.gz

macos-10.15-amd64

4

Mac Inform...edd.gz

macos-10.15-amd64

1

Mac Inform...d-uuid

macos-10.15-amd64

1

Mac Inform...fo.xml

macos-10.15-amd64

4

Mac Inform...former

macos-10.15-amd64

4

Mac Inform...fo.xml

macos-10.15-amd64

4

Mac Inform...r.html

macos-10.15-amd64

4

Mac Inform...min.js

macos-10.15-amd64

4

Mac Inform...ess.js

macos-10.15-amd64

4

Mac Inform...s.html

macos-10.15-amd64

4

Mac Inform...g.html

macos-10.15-amd64

4

Mac Inform...r.scpt

macos-10.15-amd64

4

Mac Inform...h.html

macos-10.15-amd64

4

Resubmissions

24/04/2024, 17:56

240424-wh4praed77 8

24/04/2024, 17:52

240424-wfrx6sec61 8

Analysis

max time kernel
132s
max time network
155s
platform
macos-10.15_amd64
resource
macos-20240410-en
resource tags

arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
24/04/2024, 17:56

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

simac.dmg

Resource

macos-20240410-en

discovery evasion

macos-10.15-amd64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

Mac Informer/.bg/install-bg.png

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Mac Informer/.fseventsd/0000000000a67edc.gz

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Mac Informer/.fseventsd/0000000000a67edd.gz

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Mac Informer/.fseventsd/fseventsd-uuid

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Mac Informer/Mac Informer.app/Contents/Info.xml

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Mac Informer/Mac Informer.app/Contents/MacOS/Mac Informer

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Mac Informer/Mac Informer.app/Contents/Resources/Info.xml

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

Mac Informer/Mac Informer.app/Contents/Resources/conn_error.html

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Mac Informer/Mac Informer.app/Contents/Resources/jquery.min.js

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

Mac Informer/Mac Informer.app/Contents/Resources/less.js

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Mac Informer/Mac Informer.app/Contents/Resources/lists.html

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Mac Informer/Mac Informer.app/Contents/Resources/loading.html

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

Mac Informer/Mac Informer.app/Contents/Resources/reveal_in_finder.scpt

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

Mac Informer/Mac Informer.app/Contents/Resources/splash.html

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Report Analysis Logs

General

Target

Mac Informer/.fseventsd/fseventsd-uuid
Size

36B
MD5

efcccef9bbf4c5be12ae257602bee178
SHA1

e030903ed280580e2618a58177fd8bef22f9c256
SHA256

7ef92700c1f18e809fd4aa3030f8ed1d9cf7d59058826c9e18fb7f704bcffd35
SHA512

833ccf9cbd3bd496309ae9a87fc754d881a0bf4d40a9ad14b2fe84855e0014375f1d4056bc569380510227dc745aa2b69f782e99a8117005a145a6e1bc6dae93

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Mac Informer/.fseventsd/fseventsd-uuid\""
1⤵
PID:491

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Mac Informer/.fseventsd/fseventsd-uuid\""
1⤵
PID:491

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Mac Informer/.fseventsd/fseventsd-uuid"
1⤵
PID:491
- /bin/zsh
  /bin/zsh -c "/Users/run/Mac Informer/.fseventsd/fseventsd-uuid"
  2⤵
  PID:492
- /Users/run/Mac
  /Users/run/Mac Informer/.fseventsd/fseventsd-uuid
  2⤵
  PID:492

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:494

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:494

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:514

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:514

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:515

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:515

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:516

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:516

/usr/bin/pluginkit
/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync
1⤵
PID:520

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdaterB516C108/OneDrive.app
1⤵
PID:521

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:545

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:545

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy