Overview

overview

4

Static

static

3

apple-musi...er.dmg

macos-10.15-amd64

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia ...no.dll

macos-10.15-amd64

4

DumpMedia ...no.dll

macos-10.15-amd64

4

DumpMedia ...no.dll

macos-10.15-amd64

4

DumpMedia ...no.dll

macos-10.15-amd64

4

DumpMedia .../no.js

macos-10.15-amd64

4

DumpMedia ....dylib

macos-10.15-amd64

4

DumpMedia ....dylib

macos-10.15-amd64

4

DumpMedia ....dylib

macos-10.15-amd64

4

DumpMedia ....dylib

macos-10.15-amd64

DumpMedia ....dylib

macos-10.15-amd64

4

Analysis

  • max time kernel
    106s
  • max time network
    120s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240410-en
  • resource tags

    arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    07/05/2024, 03:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    DumpMedia Apple Music Converter 4.0.10/DumpMedia Apple Music Converter.app/Contents/Resources/app/no.js

  • Size

    3KB

  • MD5

    e0319363c4e8d95a44a00bf037061414

  • SHA1

    2e3895647ccdb1d20eea6c325d32f7e12f4d7f2c

  • SHA256

    f3264fd3f9dd9bc3e051cdcf72125d34617b2b06b914c49f1e1297e53cfd524b

  • SHA512

    3555a6f001dc983eaeb6f63368dc7c6c3962003b73f15991112e16e8942b90b83f8aa83e16ae35eb076db9422924b9aac00d7ad312b27589b10264fc249b3915

Score
4/10
evasion

Malware Config

Signatures

  • Resource Forking 1 TTPs 4 IoCs

    Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

    evasion

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/DumpMedia Apple Music Converter 4.0.10/DumpMedia Apple Music Converter.app/Contents/Resources/app/no.js\""
    1⤵
      PID:508
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/DumpMedia Apple Music Converter 4.0.10/DumpMedia Apple Music Converter.app/Contents/Resources/app/no.js\""
      1⤵
        PID:508
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/DumpMedia Apple Music Converter 4.0.10/DumpMedia Apple Music Converter.app/Contents/Resources/app/no.js"
        1⤵
          PID:508
          • /bin/zsh
            /bin/zsh -c "/Users/run/DumpMedia Apple Music Converter 4.0.10/DumpMedia Apple Music Converter.app/Contents/Resources/app/no.js"
            2⤵
              PID:509
            • /Users/run/DumpMedia
              /Users/run/DumpMedia Apple Music Converter 4.0.10/DumpMedia Apple Music Converter.app/Contents/Resources/app/no.js
              2⤵
                PID:509

            Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads