Analysis

  • max time kernel
    116s
  • max time network
    120s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240410-en
  • resource tags

    arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    07/05/2024, 03:44

General

  • Target

    DumpMedia Apple Music Converter 4.0.10/DumpMedia Apple Music Converter.app/Contents/Resources/app/no.js

  • Size

    15KB

  • MD5

    30b90f8461401d46691133e4ca389677

  • SHA1

    617fb26f253887104a0600719666732e712d0cc4

  • SHA256

    6b1396e690e34c32da14be3806d6923d737dec952f9714f5dac1190f580fcc45

  • SHA512

    bf0f39adc80e1238451a7bc74ffb5ebaaf76e6752f346238dcc23d44c5e465df63db07ee5dc95ad61d1a28647a19a80409f84137e8f21e2a900b0ddd9035c261

  • SSDEEP

    192:85b2BOFlkjlyVK3y+lonvzINqXw29FjNqSL/8KC0VKNfbanDrQ6gy12R3NuO03Mp:Gya2LgvEFvKWjpPGCtBINjo

Score
4/10

Malware Config

Signatures

  • Resource Forking 1 TTPs 4 IoCs

    Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/DumpMedia Apple Music Converter 4.0.10/DumpMedia Apple Music Converter.app/Contents/Resources/app/no.js\""
    1⤵
      PID:489
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/DumpMedia Apple Music Converter 4.0.10/DumpMedia Apple Music Converter.app/Contents/Resources/app/no.js\""
      1⤵
        PID:489
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/DumpMedia Apple Music Converter 4.0.10/DumpMedia Apple Music Converter.app/Contents/Resources/app/no.js"
        1⤵
          PID:489
          • /bin/zsh
            /bin/zsh -c "/Users/run/DumpMedia Apple Music Converter 4.0.10/DumpMedia Apple Music Converter.app/Contents/Resources/app/no.js"
            2⤵
              PID:496
            • /Users/run/DumpMedia
              /Users/run/DumpMedia Apple Music Converter 4.0.10/DumpMedia Apple Music Converter.app/Contents/Resources/app/no.js
              2⤵
                PID:496

            Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads