Overview
overview
10Static
static
3000.exe
windows10-2004-x64
000.exe
macos-10.15-amd64
4Ana.exe
windows10-2004-x64
Ana.exe
macos-10.15-amd64
4Bad Rabit.exe
windows10-2004-x64
10Bad Rabit.exe
macos-10.15-amd64
1Desktop Puzzle.exe
windows10-2004-x64
1Desktop Puzzle.exe
macos-10.15-amd64
1Memz.exe
windows10-2004-x64
7Memz.exe
macos-10.15-amd64
1NoEscape.exe
windows10-2004-x64
NoEscape.exe
macos-10.15-amd64
1WannaCrypt0r.exe
windows10-2004-x64
10WannaCrypt0r.exe
macos-10.15-amd64
1Resubmissions
08-06-2024 08:50
240608-krvyesae91 1008-05-2024 16:15
240508-tqnx6ach3w 1008-05-2024 16:07
240508-tkr3mafa54 1001-05-2024 18:02
240501-wmf49acg3s 627-04-2024 08:46
240427-kpfeysff8s 1025-04-2024 21:25
240425-z9y55afb7v 1025-04-2024 21:16
240425-z4pphafa97 1025-04-2024 18:27
240425-w3929sde33 1025-04-2024 18:17
240425-ww4a5sdc8x 10Analysis
-
max time kernel
121s -
max time network
120s -
platform
macos-10.15_amd64 -
resource
macos-20240410-en -
resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
25-04-2024 17:55
Static task
static1
Behavioral task
behavioral1
Sample
000.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
000.exe
Resource
macos-20240410-en
Behavioral task
behavioral3
Sample
Ana.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral4
Sample
Ana.exe
Resource
macos-20240410-en
Behavioral task
behavioral5
Sample
Bad Rabit.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral6
Sample
Bad Rabit.exe
Resource
macos-20240410-en
Behavioral task
behavioral7
Sample
Desktop Puzzle.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral8
Sample
Desktop Puzzle.exe
Resource
macos-20240410-en
Behavioral task
behavioral9
Sample
Memz.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral10
Sample
Memz.exe
Resource
macos-20240410-en
Behavioral task
behavioral11
Sample
NoEscape.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral12
Sample
NoEscape.exe
Resource
macos-20240410-en
Behavioral task
behavioral13
Sample
WannaCrypt0r.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral14
Sample
WannaCrypt0r.exe
Resource
macos-20240410-en
General
-
Target
NoEscape.exe
-
Size
666KB
-
MD5
989ae3d195203b323aa2b3adf04e9833
-
SHA1
31a45521bc672abcf64e50284ca5d4e6b3687dc8
-
SHA256
d30d7676a3b4c91b77d403f81748ebf6b8824749db5f860e114a8a204bca5b8f
-
SHA512
e9d4e6295869f3a456c7ea2850c246d0c22afa65c2dd5161744ee5b3e29e44d9a2d758335f98001cdb348eaa51a71cd441b4ddc12c8d72509388657126e69305
-
SSDEEP
12288:85J5X487qJUtcWfkVJ6g5s/cD01oKHQyis2AePsr8nP712TB:s487pcZEgwcDpg1L2tbPR2t
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/NoEscape.exe\""1⤵PID:485
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/NoEscape.exe\""1⤵PID:485
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/NoEscape.exe1⤵PID:485
-
/bin/zsh/bin/zsh -c /Users/run/NoEscape.exe2⤵PID:486
-
-
/Users/run/NoEscape.exe/Users/run/NoEscape.exe2⤵PID:486
-