Overview

overview

8

Static

static

1

simac.dmg

macos-10.15-amd64

8

Mac Inform...bg.png

macos-10.15-amd64

1

Mac Inform...edc.gz

macos-10.15-amd64

4

Mac Inform...edd.gz

macos-10.15-amd64

1

Mac Inform...d-uuid

macos-10.15-amd64

1

Mac Inform...fo.xml

macos-10.15-amd64

4

Mac Inform...former

macos-10.15-amd64

4

Mac Inform...fo.xml

macos-10.15-amd64

4

Mac Inform...r.html

macos-10.15-amd64

4

Mac Inform...min.js

macos-10.15-amd64

4

Mac Inform...ess.js

macos-10.15-amd64

4

Mac Inform...s.html

macos-10.15-amd64

4

Mac Inform...g.html

macos-10.15-amd64

4

Mac Inform...r.scpt

macos-10.15-amd64

4

Mac Inform...h.html

macos-10.15-amd64

4

Resubmissions

24-04-2024 17:56

240424-wh4praed77 8

24-04-2024 17:52

240424-wfrx6sec61 8

Analysis

  • max time kernel
    50s
  • max time network
    56s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240410-en
  • resource tags

    arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    24-04-2024 17:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Mac Informer/Mac Informer.app/Contents/Resources/Info.xml

  • Size

    806B

  • MD5

    0bce58a97ba8c3d2af3519403519e261

  • SHA1

    8045c59792ef4b568bd2ae5d30b60e616b7ca16b

  • SHA256

    224734b7f17caf585deaeaef12937abfaab28040fd402dd3543d4b79f96a5471

  • SHA512

    275db6133b3db79985cef757a0b5a7115f340770ee6a031e2100de094f81e62edcc4f42be17c278098bdd2a30e5fabfd6807c3318065f7609c40f160f4d9a5b5

Score
4/10
evasion

Malware Config

Signatures

  • Resource Forking 1 TTPs 4 IoCs

    Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

    evasion

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Mac Informer/Mac Informer.app/Contents/Resources/Info.xml\""
    1⤵
      PID:487
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Mac Informer/Mac Informer.app/Contents/Resources/Info.xml\""
      1⤵
        PID:487
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/Mac Informer/Mac Informer.app/Contents/Resources/Info.xml"
        1⤵
          PID:487
          • /bin/zsh
            /bin/zsh -c "/Users/run/Mac Informer/Mac Informer.app/Contents/Resources/Info.xml"
            2⤵
              PID:488
            • /Users/run/Mac
              /Users/run/Mac Informer/Mac Informer.app/Contents/Resources/Info.xml
              2⤵
                PID:488

            Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads