Analysis

  • max time kernel
    70s
  • max time network
    121s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240410-en
  • resource tags

    arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    22-05-2024 03:07

General

  • Target

    Frost Launcher/runtimes/osx/native/libmongocrypt.dylib

  • Size

    9.2MB

  • MD5

    39d1ebfca75fb6bd3b98f6539b36c648

  • SHA1

    8bf47119cab62375071e9849e6e2f53db387453b

  • SHA256

    208f78bc7c109080c3aac9cd268f2af1f82e9b53035d22b8b5a49f70ef0603d9

  • SHA512

    63d8d606159f7c67c414fc7155202c26cebefaf71506e4a0a9d7ebf7ad0c02485e20e79708bf583f7e3f0000f09d916e1d0df1346a9253ab4022d9b020e9d21c

  • SSDEEP

    98304:yr1WotAfoOG5/GBKrb8mlGGKrb8O28wvcdjYzube4+nYXJTKZO/GBKrb8mlGGKrs:IGJmFJjzUdjYzube4+nYiJmFJjDqm

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Frost Launcher/runtimes/osx/native/libmongocrypt.dylib\""
    1⤵
      PID:509
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Frost Launcher/runtimes/osx/native/libmongocrypt.dylib\""
      1⤵
        PID:509
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/Frost Launcher/runtimes/osx/native/libmongocrypt.dylib"
        1⤵
          PID:509
          • /bin/zsh
            /bin/zsh -c "/Users/run/Frost Launcher/runtimes/osx/native/libmongocrypt.dylib"
            2⤵
              PID:510
            • /Users/run/Frost
              /Users/run/Frost Launcher/runtimes/osx/native/libmongocrypt.dylib
              2⤵
                PID:510

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads