Analysis
- max time kernel
138s - max time network
138s - platform
macos-10.15_amd64 - resource
macos-20240410-en - resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
02/06/2024, 22:24
Static task
static1
Behavioral task
behavioral1
Sample
utorrent_installer.exe
Resource
win11-20240508-en
33 signatures
150 seconds
Behavioral task
behavioral2
Sample
utorrent_installer.exe
Resource
macos-20240410-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
utorrent_installer.exe
Resource
debian9-mipsbe-20240226-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
utorrent_installer.exe
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
utorrent_installer.exe
Resource
ubuntu2404-amd64-20240523-en
0 signatures
150 seconds
General
- Target utorrent_installer.exe
- Size 1.7MB
- Sample240602-2bvfdsac66
- SHA256 bdb05a92a4c80a2d3e186b8667c0b2f69dedd79a65160e5d8279cf50327f8c0e
- MD5 d204f311d28e362f34a4916bd946da42
- SHA1 2d385a49472352218787b8f31c1a6e699f20cf61
- SHA512 c2a0c14c6069706823be1148048a6935405e53136dc5bcf080170aca231cdcf56a3aebe8661d59bea7986f7652e749c69f9cd5bdfde476e8e984ebd56da17157
- SSDEEP 24576:r7FUDowAyrTVE3U5FKGkZsyl6bms5arHU2StvAOkljvSAU68gvAMAW:rBuZrEU9bUryvhqvSz2IMAW
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/utorrent_installer.exe\""1⤵PID:482
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/utorrent_installer.exe\""1⤵PID:482
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/utorrent_installer.exe1⤵PID:482
-
/bin/zsh/bin/zsh -c /Users/run/utorrent_installer.exe2⤵PID:484
-
-
/Users/run/utorrent_installer.exe/Users/run/utorrent_installer.exe2⤵PID:484
-
-
/usr/sbin/spctl/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app1⤵PID:525
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:532
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:533
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:541
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:541