43d4f8e901cf19bad05ecd05fdd411b460b2eabb3ee4bc6e91e70d0b0af8032c | Triage

Analysis

max time kernel
113s
max time network
144s
platform
macos-10.15_amd64
resource
macos-20240410-en
resource tags

arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
25-04-2024 07:08

Sharing

Report Analysis Logs

General

Target

Xvirus-Tools-1.7.1/util/options/token_joiner.py
Size

914B
MD5

cecb0053c054bb678d06598d0318ad5b
SHA1

0492a0fb5d426d9fe5c4753426366be158daaea2
SHA256

c955e1399150c26775c0fa5715bfe8359128217acda1e4c64198387af9ac7d18
SHA512

edb96c1c990172892006eba4f633bb285dae3f5e642a97be6a8ae3131c4a8d3a846d164eec0c778489a31d1b06d056eea8044dabe168ad73cd43253c32dadded

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Xvirus-Tools-1.7.1/util/options/token_joiner.py\""
1⤵
PID:487

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Xvirus-Tools-1.7.1/util/options/token_joiner.py\""
1⤵
PID:487

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Xvirus-Tools-1.7.1/util/options/token_joiner.py
1⤵
PID:487

/bin/zsh
/bin/zsh -c /Users/run/Xvirus-Tools-1.7.1/util/options/token_joiner.py
2⤵
PID:488

/Users/run/Xvirus-Tools-1.7.1/util/options/token_joiner.py
/Users/run/Xvirus-Tools-1.7.1/util/options/token_joiner.py
2⤵
PID:488

/bin/sh
sh /Users/run/Xvirus-Tools-1.7.1/util/options/token_joiner.py
2⤵
PID:488

/bin/bash
sh /Users/run/Xvirus-Tools-1.7.1/util/options/token_joiner.py
2⤵
PID:488

/usr/bin/from
from util import Applications Library System Users Volumes bin cores dev etc home opt private sbin tmp usr var
3⤵
PID:489

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...