Analysis
-
max time kernel
144s -
max time network
154s -
platform
macos-10.15_amd64 -
resource
macos-20240410-en -
resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
15-05-2024 16:26
Static task
static1
Behavioral task
behavioral1
Sample
AtomicStealer/Trading View
Resource
macos-20240410-en
macos-10.15-amd64
0 signatures
150 seconds
General
-
Target
AtomicStealer/Trading View
-
Size
772KB
-
MD5
7287f328f3acb1774ecc42606e2da598
-
SHA1
ad8be4808f7dd910cec11d7eed88933e3f50132a
-
SHA256
ce3c57e6c025911a916a61a716ff32f2699f3e3a84eb0ebbe892a5d4b8fb9c7a
-
SHA512
3c5f06428bef9e700f1100279ed366c2962e1383ae57d6c185b8da708c91b6864928dff61e5d85b02ab247c4f2453ad83243501e2530dfdafe3eef01cbc6b6c0
-
SSDEEP
12288:ptDbsQFH0rsNxqxxos6x8au9xRuC5wFDeruKTCaftiA:pF10rwqo7CGerDCa
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/AtomicStealer/Trading View\""1⤵PID:482
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/AtomicStealer/Trading View\""1⤵PID:482
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/AtomicStealer/Trading View"1⤵PID:482
-
/bin/zsh/bin/zsh -c "/Users/run/AtomicStealer/Trading View"2⤵PID:484
-
/Users/run/AtomicStealer/Trading/Users/run/AtomicStealer/Trading View2⤵PID:484
-
/usr/sbin/spctl/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app1⤵PID:524
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:531
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:532