43d4f8e901cf19bad05ecd05fdd411b460b2eabb3ee4bc6e91e70d0b0af8032c | Triage

Submit
Reports

Overview

overview

4

Static

static

1

Xvirus-Too...rus.py

macos-10.15-amd64

1

Xvirus-Too...up.bat

macos-10.15-amd64

4

Xvirus-Too...rt.bat

macos-10.15-amd64

4

Xvirus-Too...t__.py

macos-10.15-amd64

4

Xvirus-Too...les.py

macos-10.15-amd64

1

Xvirus-Too...mer.py

macos-10.15-amd64

1

Xvirus-Too...ger.py

macos-10.15-amd64

1

Xvirus-Too...ort.py

macos-10.15-amd64

1

Xvirus-Too...mer.py

macos-10.15-amd64

4

Xvirus-Too...ger.py

macos-10.15-amd64

1

Xvirus-Too...ker.py

macos-10.15-amd64

4

Xvirus-Too...ker.py

macos-10.15-amd64

1

Xvirus-Too...ner.py

macos-10.15-amd64

1

Xvirus-Too...ver.py

macos-10.15-amd64

1

Xvirus-Too...ger.py

macos-10.15-amd64

4

Xvirus-Too...ver.py

macos-10.15-amd64

1

Xvirus-Too...ker.py

macos-10.15-amd64

4

Xvirus-Too...per.py

macos-10.15-amd64

1

Xvirus-Too...ool.py

macos-10.15-amd64

1

Xvirus-Too...ngs.py

macos-10.15-amd64

1

Xvirus-Too...ils.py

macos-10.15-amd64

1

Analysis

max time kernel
55s
max time network
152s
platform
macos-10.15_amd64
resource
macos-20240410-en
resource tags

arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
25-04-2024 07:08

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

Xvirus-Tools-1.7.1/Xvirus.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Xvirus-Tools-1.7.1/setup.bat

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Xvirus-Tools-1.7.1/start.bat

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Xvirus-Tools-1.7.1/util/__init__.py

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Xvirus-Tools-1.7.1/util/options/bypass_rules.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Xvirus-Tools-1.7.1/util/options/channel_spammer.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Xvirus-Tools-1.7.1/util/options/hypesquad_changer.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Xvirus-Tools-1.7.1/util/options/mass_report.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Xvirus-Tools-1.7.1/util/options/soundboard_spammer.py

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Xvirus-Tools-1.7.1/util/options/token_bio_changer.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Xvirus-Tools-1.7.1/util/options/token_checker.py

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Xvirus-Tools-1.7.1/util/options/token_global_nicker.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Xvirus-Tools-1.7.1/util/options/token_joiner.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Xvirus-Tools-1.7.1/util/options/token_leaver.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Xvirus-Tools-1.7.1/util/options/token_pron_changer.py

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Xvirus-Tools-1.7.1/util/options/token_saver.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Xvirus-Tools-1.7.1/util/options/token_server_nicker.py

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Xvirus-Tools-1.7.1/util/options/token_typer.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Xvirus-Tools-1.7.1/util/options/webhook_tool.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Xvirus-Tools-1.7.1/util/plugins/settings.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Xvirus-Tools-1.7.1/util/plugins/utils.py

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Xvirus-Tools-1.7.1/util/options/token_global_nicker.py
Size

668B
MD5

aceb9d50b3fd883f809940a1ccf32c58
SHA1

99533de8d3f33a3da6c98a7963de0bf307258458
SHA256

d972e6a17370e2bd5f9d86a016994b5a1c5b06089cb2725d1c7a4c20e0a133d2
SHA512

fd8e1e09a72c9432c87fb3bd0170aefa2b569bca9f325714f43c013fbb007d9423c60d033bf3abd14faf2e27efdbd1bf268f6b0ef085ebfb38b38dbd3b1aec4f

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Xvirus-Tools-1.7.1/util/options/token_global_nicker.py\""
1⤵
PID:490

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Xvirus-Tools-1.7.1/util/options/token_global_nicker.py\""
1⤵
PID:490

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Xvirus-Tools-1.7.1/util/options/token_global_nicker.py
1⤵
PID:490

/bin/zsh
/bin/zsh -c /Users/run/Xvirus-Tools-1.7.1/util/options/token_global_nicker.py
2⤵
PID:491

/Users/run/Xvirus-Tools-1.7.1/util/options/token_global_nicker.py
/Users/run/Xvirus-Tools-1.7.1/util/options/token_global_nicker.py
2⤵
PID:491

/bin/sh
sh /Users/run/Xvirus-Tools-1.7.1/util/options/token_global_nicker.py
2⤵
PID:491

/bin/bash
sh /Users/run/Xvirus-Tools-1.7.1/util/options/token_global_nicker.py
2⤵
PID:491

/usr/bin/from
from util import Applications Library System Users Volumes bin cores dev etc home opt private sbin tmp usr var
3⤵
PID:492

/usr/bin/pluginkit
/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync
1⤵
PID:516

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdaterB516C108/OneDrive.app
1⤵
PID:517

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:520

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy