Analysis

  • max time kernel
    29s
  • max time network
    36s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240410-en
  • resource tags

    arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    11/05/2024, 06:01

General

  • Target

    Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/fr.lproj/CepAgreement.rtf

  • Size

    1KB

  • MD5

    89457a25a35d9c68bf54d0d6c91f944d

  • SHA1

    e2061c065038a852e46a58b46c0f76586bbe6275

  • SHA256

    a22845d0f5141bf20cdae6a4b2a69258709874dce710d0935f63d1c17800574e

  • SHA512

    ed4bde9891b1ce3356d81a99ebf00e93479b8210e48719e85bf2dd54e40efe439108422af08470de7acbfe48fb388d29a74a2e8a493d649ad38f286ef727e211

Score
4/10

Malware Config

Signatures

  • Resource Forking 1 TTPs 4 IoCs

    Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/fr.lproj/CepAgreement.rtf\""
    1⤵
      PID:487
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/fr.lproj/CepAgreement.rtf\""
      1⤵
        PID:487
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/fr.lproj/CepAgreement.rtf"
        1⤵
          PID:487
          • /bin/zsh
            /bin/zsh -c "/Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/fr.lproj/CepAgreement.rtf"
            2⤵
              PID:488
            • /Users/run/Install
              /Users/run/Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/fr.lproj/CepAgreement.rtf
              2⤵
                PID:488

            Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads