Analysis

  • max time kernel
    110s
  • max time network
    144s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240410-en
  • resource tags

    arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    14/05/2024, 20:58

General

  • Target

    Discord/Discord.app/Contents/embedded.provisionprofile

  • Size

    12KB

  • MD5

    2f94a2ab8d9f55e6f3bced63378a5a2d

  • SHA1

    dbcd97d425fa9f104e0b1a7f05e473d7a7f29948

  • SHA256

    d9611d59f5b908e8f92e19457d861f035e47339247b360653e7fc9887f0619ef

  • SHA512

    dcd228cfc34c6374692e2ea7772edf888c715dfdc0d0a2e181cb2085e04c327d8039ef0925b6d37b9a0b250ac0982e657eb463460b713c8b1e2c6d8b02082199

  • SSDEEP

    192:vvvMDc/rCNatP9qi2OmF8HXf1ylVl9n5fUWDrtbX/wWh84ouS2Y8P011ZPR:fW4CQtP9qjzF83f1yxv5PZwW+xuY8iJ

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Discord/Discord.app/Contents/embedded.provisionprofile\""
    1⤵
      PID:487
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Discord/Discord.app/Contents/embedded.provisionprofile\""
      1⤵
        PID:487
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/Discord/Discord.app/Contents/embedded.provisionprofile
        1⤵
          PID:487
          • /bin/zsh
            /bin/zsh -c /Users/run/Discord/Discord.app/Contents/embedded.provisionprofile
            2⤵
              PID:488
            • /Users/run/Discord/Discord.app/Contents/embedded.provisionprofile
              /Users/run/Discord/Discord.app/Contents/embedded.provisionprofile
              2⤵
                PID:488

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads