Overview
overview
7Static
static
1macjihuo-2022/mac.sh
ubuntu-18.04-amd64
3macjihuo-2022/mac.sh
debian-9-armhf
1macjihuo-2022/mac.sh
debian-9-mips
macjihuo-2022/mac.sh
debian-9-mipsel
macjihuo-2...ol.jar
windows7-x64
1macjihuo-2...ol.jar
windows10-2004-x64
7macjihuo-2...ol.jar
windows7-x64
1macjihuo-2...ol.jar
windows10-2004-x64
7macjihuo-2...ns.jar
windows7-x64
1macjihuo-2...ns.jar
windows10-2004-x64
7macjihuo-2...me.jar
windows7-x64
1macjihuo-2...me.jar
windows10-2004-x64
7macjihuo-2....1.jar
windows7-x64
1macjihuo-2....1.jar
windows10-2004-x64
7macjihuo-2...ap.jar
windows7-x64
1macjihuo-2...ap.jar
windows10-2004-x64
7macjihuo-2...er.jar
windows7-x64
1macjihuo-2...er.jar
windows10-2004-x64
7macjihuo-2...rl.jar
windows7-x64
1macjihuo-2...rl.jar
windows10-2004-x64
7macjihuo-2...17.jar
windows7-x64
1macjihuo-2...17.jar
windows10-2004-x64
7macjihuo-2...18.jar
windows7-x64
1macjihuo-2...18.jar
windows10-2004-x64
7macjihuo-2...19.jar
windows7-x64
1macjihuo-2...19.jar
windows10-2004-x64
7macjihuo-2...nd.jar
windows7-x64
1macjihuo-2...nd.jar
windows10-2004-x64
7macjihuo-2...ea.jar
windows7-x64
1macjihuo-2...ea.jar
windows10-2004-x64
7macjihuo-2...rm.jar
windows7-x64
1macjihuo-2...rm.jar
windows10-2004-x64
7Analysis
- max time kernel
0s - max time network
130s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20240508-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
06/06/2024, 12:31
Static task
static1
Behavioral task
behavioral1
Sample
macjihuo-2022/mac.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
macjihuo-2022/mac.sh
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
macjihuo-2022/mac.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
macjihuo-2022/mac.sh
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral5
Sample
macjihuo-2022/micool_macconfig/configfile/micool.jar
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
macjihuo-2022/micool_macconfig/configfile/micool.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
macjihuo-2022/micool_macconfig/configfile/micool/micool.jar
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
macjihuo-2022/micool_macconfig/configfile/micool/micool.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
macjihuo-2022/micool_macconfig/configfile/micool/plugins/dns.jar
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
macjihuo-2022/micool_macconfig/configfile/micool/plugins/dns.jar
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
macjihuo-2022/micool_macconfig/configfile/micool/plugins/hideme.jar
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
macjihuo-2022/micool_macconfig/configfile/micool/plugins/hideme.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
macjihuo-2022/micool_macconfig/configfile/micool/plugins/mymap-v1.0.1.jar
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
macjihuo-2022/micool_macconfig/configfile/micool/plugins/mymap-v1.0.1.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
macjihuo-2022/micool_macconfig/configfile/micool/plugins/mymap.jar
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
macjihuo-2022/micool_macconfig/configfile/micool/plugins/mymap.jar
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
macjihuo-2022/micool_macconfig/configfile/micool/plugins/power.jar
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
macjihuo-2022/micool_macconfig/configfile/micool/plugins/power.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
macjihuo-2022/micool_macconfig/configfile/micool/plugins/url.jar
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
macjihuo-2022/micool_macconfig/configfile/micool/plugins/url.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
macjihuo-2022/micool_macconfig/configfile/micool2017.jar
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
macjihuo-2022/micool_macconfig/configfile/micool2017.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
macjihuo-2022/micool_macconfig/configfile/micool2018.jar
Resource
win7-20240220-en
Behavioral task
behavioral24
Sample
macjihuo-2022/micool_macconfig/configfile/micool2018.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
macjihuo-2022/micool_macconfig/configfile/micool2019.jar
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
macjihuo-2022/micool_macconfig/configfile/micool2019.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
macjihuo-2022/micool_macconfig/configfile/yz/active-agt-goland.jar
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
macjihuo-2022/micool_macconfig/configfile/yz/active-agt-goland.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
macjihuo-2022/micool_macconfig/configfile/yz/active-agt-idea.jar
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
macjihuo-2022/micool_macconfig/configfile/yz/active-agt-idea.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
macjihuo-2022/micool_macconfig/configfile/yz/active-agt-phpstorm.jar
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
macjihuo-2022/micool_macconfig/configfile/yz/active-agt-phpstorm.jar
Resource
win10v2004-20240508-en
General
- Target macjihuo-2022/mac.sh
- Size 535B
- Sample240606-pp14wafb28
- SHA256 f5146a9c3933273dcd1eb1d8badda6f1006a22654d199e94d14c7c90d4700a90
- MD5 481649c933fa22f31f9ed82977d1a620
- SHA1 2ea3adc2de2d6302f076ffd4aa81942905f5d3e9
- SHA512 4bd7448fab6cad71616a6732ce9041c26cdf052ea95a443ca6a54174e17fb380a65234fc05d9ec2491e74b05a08f0f9eeade5773b043982154a842c6bd077a60
- MD5 SHA1 SHA512
Malware Config
Signatures
- Reads runtime system information 5 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/filesystems cp File opened for reading /proc/filesystems cp File opened for reading /proc/filesystems sed File opened for reading /proc/filesystems sed File opened for reading /proc/filesystems cp - Writes file to tmp directory 64 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/AppCode2022.2/sed5oBQwT sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/PyCharm2017.3/config/sedDrZmWd sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/Rider2019.3/config/sedOLD8IQ sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/Goland2020.2/sedrMDXbU sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/PhpStorm2021.3/sedzbGGup sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/CLion2018.1/config/sedMecfjR sed File opened for modification /tmp/macjihuo-2022/~/yz/active-agt-goland.jar cp File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/AppCode2020.3/sedvBZXc4 sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/Datagrip2021.1/sedpwEjLV sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/IntelliJIdea2018.3/config/sedkYb7bC sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/PyCharm2019.3/config/sed72gAJF sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/PyCharm2017.2/config/sedGFX6jE sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/DataSpell2020.2/sedH1Di1G sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/AppCode2017.1/config/sed4zkuc0 sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/CLion2019.1/config/sedP5JQDz sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/IntelliJIdea2017.3/config/sedXd4ZxT sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/Goland2022.3/sedVFwqLS sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/PyCharm2020.2/sedhib1Qf sed File opened for modification /tmp/macjihuo-2022/~/micool/plugins/mymap.jar cp File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/IntelliJIdea2020.1/sed3DdZZr sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/Rider2021.1/sedVGUz4v sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/CLion2018.3/config/sedatHac0 sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/DataSpell2017.3/config/sedXjXDgA sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/AppCode2019.2/config/sedblKB8Z sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/RubyMine2019.2/config/sed8f61ks sed File opened for modification /tmp/macjihuo-2022/~/yz/plugins/power.jar cp File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/AppCode2021.2/sedh3cUgc sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/Datagrip2021.3/sedfdh783 sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/DataGrip2018.3/config/sedRu0Wl9 sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/WebStorm2019.3/config/seduCt9Id sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/RubyMine2022.2/sedfhmThV sed File opened for modification /tmp/macjihuo-2022/~/yz/active-agt-rider.jar cp File opened for modification /tmp/macjihuo-2022/~/micool.jar cp File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/DataSpell2022.3/sednynM5E sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/Goland2022.2/sedpWP1wj sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/IntelliJIdea2021.3/sed7J7Gci sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/PhpStorm2022.3/sed7NiPi7 sed File opened for modification /tmp/macjihuo-2022/~/micool/config/url.conf cp File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/AppCode2017.2/config/sedba82Bz sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/AppCode2018.3/config/sedJoPNhR sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/PyCharm2017.1/config/sedtypXH4 sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/RubyMine2018.3/config/sed8O1XTi sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/Clion2022.1/sedNAfotq sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/Rider2020.1/sedJ2h89N sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/WebStorm2021.3/sedncuNJU sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/Goland2020.1/sedBYZFYk sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/CLion2017.3/config/sedN0I0Rh sed File opened for modification /tmp/macjihuo-2022/~/yz/fuzzes/active-agt-rider.jar cp File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/GoLand2018.2/config/sedeOUNPS sed File opened for modification /tmp/macjihuo-2022/~/micool/config/dns.conf cp File opened for modification /tmp/macjihuo-2022/~/micool/plugins/dns.jar cp File opened for modification /tmp/macjihuo-2022/~/yz/active-agt-pycharm.jar cp File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/AppCode2022.3/sedpNOiDs sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/Goland2021.3/sedvlyH4a sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/CLion2018.2/config/sed9esDKq sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/DataGrip2017.3/config/sedIdDKVq sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/AppCode2020.2/sed7K6gbv sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/RubyMine2017.2/config/sedsFqu6Z sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/Goland2022.1/sed9ZtMiK sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/Rider2019.2/config/sedfcLH2g sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/AppCode2022.1/sedJlazqk sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/Datagrip2022.1/sedlnpLlD sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrains/DataSpell2022.1/sedVxT0Lw sed File opened for modification /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/Rider2018.3/config/sedDbikG7 sed
Processes
-
/tmp/macjihuo-2022/mac.sh/tmp/macjihuo-2022/mac.sh1⤵PID:1517
-
/bin/sedsed -i s/bianliang1//g micool_macconfig/JetBrains/AppCode2020.1/appcode.vmoptions micool_macconfig/JetBrains/AppCode2020.2/appcode.vmoptions micool_macconfig/JetBrains/AppCode2020.3/appcode.vmoptions micool_macconfig/JetBrains/AppCode2021.1/appcode.vmoptions micool_macconfig/JetBrains/AppCode2021.2/appcode.vmoptions micool_macconfig/JetBrains/AppCode2021.3/appcode.vmoptions micool_macconfig/JetBrains/AppCode2022.1/appcode.vmoptions micool_macconfig/JetBrains/AppCode2022.2/appcode.vmoptions micool_macconfig/JetBrains/AppCode2022.3/appcode.vmoptions micool_macconfig/JetBrains/Clion2020.1/clion.vmoptions micool_macconfig/JetBrains/Clion2020.2/clion.vmoptions micool_macconfig/JetBrains/Clion2020.3/clion.vmoptions micool_macconfig/JetBrains/Clion2021.1/clion.vmoptions micool_macconfig/JetBrains/Clion2021.2/clion.vmoptions micool_macconfig/JetBrains/Clion2021.3/clion.vmoptions micool_macconfig/JetBrains/Clion2022.1/clion.vmoptions micool_macconfig/JetBrains/Clion2022.2/clion.vmoptions micool_macconfig/JetBrains/Clion2022.3/clion.vmoptions micool_macconfig/JetBrains/DataSpell2020.1/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2020.2/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2020.3/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2021.1/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2021.2/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2021.3/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2022.1/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2022.2/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2022.3/dataspell.vmoptions micool_macconfig/JetBrains/Datagrip2020.1/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2020.2/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2020.3/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2021.1/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2021.2/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2021.3/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2022.1/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2022.2/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2022.3/datagrip.vmoptions micool_macconfig/JetBrains/Goland2020.1/goland.vmoptions micool_macconfig/JetBrains/Goland2020.2/goland.vmoptions micool_macconfig/JetBrains/Goland2020.3/goland.vmoptions micool_macconfig/JetBrains/Goland2021.1/goland.vmoptions micool_macconfig/JetBrains/Goland2021.2/goland.vmoptions micool_macconfig/JetBrains/Goland2021.3/goland.vmoptions micool_macconfig/JetBrains/Goland2022.1/goland.vmoptions micool_macconfig/JetBrains/Goland2022.2/goland.vmoptions micool_macconfig/JetBrains/Goland2022.3/goland.vmoptions micool_macconfig/JetBrains/IntelliJIdea2020.1/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2020.2/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2020.3/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2021.1/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2021.2/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2021.3/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2022.1/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2022.2/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2022.3/idea.vmoptions micool_macconfig/JetBrains/PhpStorm2020.1/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2020.2/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2020.3/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2021.1/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2021.2/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2021.3/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2022.1/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2022.2/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2022.3/phpstorm.vmoptions micool_macconfig/JetBrains/PyCharm2020.1/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2020.2/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2020.3/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2021.1/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2021.2/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2021.3/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2022.1/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2022.2/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2022.3/pycharm.vmoptions micool_macconfig/JetBrains/Rider2020.1/rider.vmoptions micool_macconfig/JetBrains/Rider2020.2/rider.vmoptions micool_macconfig/JetBrains/Rider2020.3/rider.vmoptions micool_macconfig/JetBrains/Rider2021.1/rider.vmoptions micool_macconfig/JetBrains/Rider2021.2/rider.vmoptions micool_macconfig/JetBrains/Rider2021.3/rider.vmoptions micool_macconfig/JetBrains/Rider2022.1/rider.vmoptions micool_macconfig/JetBrains/Rider2022.2/rider.vmoptions micool_macconfig/JetBrains/Rider2022.3/rider.vmoptions micool_macconfig/JetBrains/RubyMine2020.1/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2020.2/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2020.3/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2021.1/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2021.2/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2021.3/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2022.1/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2022.2/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2022.3/rubymine.vmoptions micool_macconfig/JetBrains/WebStorm2020.1/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2020.2/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2020.3/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2021.1/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2021.2/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2021.3/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2022.1/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2022.2/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2022.3/webstorm.vmoptions2⤵
- Reads runtime system information
- Writes file to tmp directory
PID:1518
-
-
/bin/sedsed -i s/bianliang1//g micool_macconfig/JetBrainsold/AppCode2017.1/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2017.2/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2017.3/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2018.1/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2018.2/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2018.3/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2019.1/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2019.2/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2019.3/config/appcode.vmoptions micool_macconfig/JetBrainsold/CLion2017.1/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2017.2/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2017.3/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2018.1/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2018.2/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2018.3/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2019.1/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2019.2/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2019.3/config/clion.vmoptions micool_macconfig/JetBrainsold/DataGrip2017.1/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2017.2/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2017.3/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2018.1/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2018.2/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2018.3/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2019.1/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2019.2/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2019.3/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataSpell2017.1/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2017.2/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2017.3/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2018.1/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2018.2/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2018.3/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2019.1/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2019.2/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2019.3/config/dataspell.vmoptions micool_macconfig/JetBrainsold/GoLand2017.1/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2017.2/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2017.3/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2018.1/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2018.2/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2018.3/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2019.1/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2019.2/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2019.3/config/goland.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2017.1/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2017.2/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2017.3/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2018.1/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2018.2/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2018.3/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2019.1/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2019.2/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2019.3/config/idea.vmoptions micool_macconfig/JetBrainsold/PhpStorm2017.1/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2017.2/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2017.3/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2018.1/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2018.2/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2018.3/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2019.1/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2019.2/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2019.3/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PyCharm2017.1/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2017.2/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2017.3/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2018.1/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2018.2/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2018.3/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2019.1/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2019.2/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2019.3/config/pycharm.vmoptions micool_macconfig/JetBrainsold/Rider2017.1/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2017.2/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2017.3/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2018.1/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2018.2/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2018.3/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2019.1/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2019.2/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2019.3/config/rider.vmoptions micool_macconfig/JetBrainsold/RubyMine2017.1/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2017.2/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2017.3/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2018.1/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2018.2/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2018.3/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2019.1/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2019.2/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2019.3/config/rubymine.vmoptions micool_macconfig/JetBrainsold/WebStorm2017.1/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2017.2/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2017.3/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2018.1/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2018.2/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2018.3/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2019.1/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2019.2/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2019.3/config/webstorm.vmoptions2⤵
- Reads runtime system information
- Writes file to tmp directory
PID:1519
-
-
/bin/cpcp -fR micool_macconfig/configfile "~/"2⤵
- Reads runtime system information
- Writes file to tmp directory
PID:1520
-
-
/bin/cpcp -fR micool_macconfig/JetBrains "~/Library/Application Support/"2⤵
- Reads runtime system information
PID:1521
-
-
/bin/cpcp -fR micool_macconfig/JetBrainsold "~/Library/Preferences/"2⤵
- Reads runtime system information
PID:1522
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/AppCode2020.1/sedfRNL9V
- Size 50B
- SHA256 bee8c1dfefa2470f1b51c48fb19ec3fa7b4fa9d14d9e41c03d0e0730ae6ce580
- MD5 648fb484f539b1da057250ecb01a0c4a
- SHA1 6991ad396b31946a88811f20662988e1125cc70d
- SHA512 f0cd1a1dc4ad43dfdef6f86d4b2748e0bfe1232613d324f822458acfedcf1246ac47c5533f082bfddda8e2ffed4dde2f94c4400bece42b315837a48c22abeb22
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/AppCode2021.3/sedTjpylL
- Size 57B
- SHA256 be9a4e426ae394b258615c25d697f693955a0e835e98e93c5090507a568faeea
- MD5 4592ada02bc8d19ca23eece71d471905
- SHA1 2a7a37ddd3b4231a5e7848c6f8f336bc54dfeb4a
- SHA512 f6b0eabd0829a6d62b53331100fe3392c5303c0bbdbc11b953585f84f92ae368974138ef759ac21d60d02fa50c7c469ee99e79122cad38d013c6264d0b65024f
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/Clion2022.1/sedNAfotq
- Size 207B
- SHA256 58e089385510c36b905622ad88257a395109fb85e652d6ae46cd68462c94190b
- MD5 f2ce790a536ea15ae3798b86d457f049
- SHA1 298c98026949043e7927f76a43b374b6bf988260
- SHA512 a6ec4b2af52b9610ed9ad63155d488c1d10f64dd1d1571887f3225c5b9b0dab4b469ac739d06c6f5f1d93dfec0c4d96121f0637005d525423111ad4a5d01bed2
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/Clion2022.2/sed5nuDBZ
- Size 207B
- SHA256 d49b28503dcfb2e26d63b58ddccfa2f8f53608de5733b735c09e771f5036d2c1
- MD5 94183880a0a377844ca8659f8c327a52
- SHA1 f73fc6399688a00e16808d728476cfd64831a13d
- SHA512 29592cea999324a69260d421a647f0c101f2c0f77440e254426052612ea7c4bc3f48e8337eb44908d0402b5371beda424913a01dc06941a5c03ed80ff1547517
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/DataSpell2022.1/sedVxT0Lw
- Size 194B
- SHA256 e253568d4a6431812791388c6d22233e25e3244954b1f4b963aea6ccf2e54c82
- MD5 8713a72de33535bbc4a3ccf245b0a459
- SHA1 552f08a2aa6881865de2876dbeba70076618b253
- SHA512 a009ec9016f324830fb1d5a06ba6c2dc34fed29dab63196bcea20f1d1090ba14f7c36479a49aaeab65983942b7868f69d75e8e6a99f85fdae1b425f0f71c0bd7
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/Datagrip2022.1/sedlnpLlD
- Size 210B
- SHA256 7d867e416fb6a3463f1ae6a252663a4354607c1a651ce8679e12d2760a3063a7
- MD5 5968a8371c3e299e2a76fd2588ccc543
- SHA1 dcd2d9c89296c576afb4d9f422f70da1045b651d
- SHA512 2d3b9e5803ca1b5d055ff3ca9ce9dcbe08512902e6388ea80a7a65627b8ebb7c5dc3bbe1baf896aa3b3a4340ba1c6b96d8168fe5c274556d31af3dfbea0cd2f3
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/Goland2022.1/sed9ZtMiK
- Size 201B
- SHA256 8969161585abd68bcbb427d8901236282cc607c0f782439b5733e90e3f7d599e
- MD5 09f88529816feb54a08550a66b1574f1
- SHA1 7e511a46e059d45a8592e52f7037d44c6ee396a8
- SHA512 57627b2c92350597bd79b73038b811d7f39f41f0ded5d85c0e1a5f108951984a338863a834368ca38f1d7718a5692e84d639d9503fa71f647704c23853e5f083
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/IntelliJIdea2022.1/sedBj4WrR
- Size 199B
- SHA256 22af227aaf188e46f32f67f18604e08357612e6e6963a31dc8cdb1016e6b72fd
- MD5 25201b35b81a2020e6f062cc4acc7fb4
- SHA1 ec3e6efa92bb543c48bb3d159e9ee6f19a5d0bb4
- SHA512 e1c91fc2e767aa120f503dfa56a1b948eb48f292569360ba5146380e16bf518cbcd0368adb2e7bfe310f29aacf1b594f03dcf8a6954f2fff8531dfe0fb94d884
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/PhpStorm2022.1/sedJKAeLY
- Size 203B
- SHA256 5c6a4b82d3ebbdd4d925cd0ee23f007271017257d511bf253ab8239ca6d82e4c
- MD5 132ed2b20fa73e5c4ba3ea467e319c3a
- SHA1 76e8d2cda6957a0cb5e44af6095af3a961810a20
- SHA512 a49fee056dbb137b8b525741c8832276631761d04483a09f0205a63fd9073fc1dfa647d9bd9d0179f25ea7dc8b54d69849ab623cba14a6a71beb53bbe251fef9
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/PyCharm2022.1/sedtsZeh6
- Size 202B
- SHA256 15a1fa998df77ba6972b4acaf391d664baec416f90e1a199046aaa57451b47f9
- MD5 d4bb80b138ad6706a055befba06303c6
- SHA1 77e968f0f760b6c2029d7309cf77ef81ac1c4eef
- SHA512 e9d5edd28ae20a2154404bf75c7ed22a7c013243eb5552f1018e2370d565fc92f870b1e9c0ed5be8cfee24a1b18c7555d18d587d8657fa4cd8176bd74412d1dc
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/Rider2022.1/sedFTms0d
- Size 207B
- SHA256 388b8b9b40c466e05cf6c20dc18567a47f2fb938867c08cb77f6c855b67d0298
- MD5 2da0fca0fe800904b8f9a506f0051453
- SHA1 a4b6116b04fee9d5907d88f00d7156dc7f5fe65e
- SHA512 d9024478739693557bf04bd18b7bf41a1ef970e143074ed46fcb5c0b2a931abab9ce70b51c70d77b3240fd673cb22c4ce426edba763afac8d69420d2f4ae7b6b
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/WebStorm2022.1/sedvnb75t
- Size 210B
- SHA256 5d707c9b179e62951960556b6c979d69db1fa85ddda056644531a1005fc9dbf2
- MD5 3a496a292d9ad388bd4ec8e4edadce7c
- SHA1 9ef96d1ba490bb0d6d9014e512863306e5763867
- SHA512 0983bfe13da9410c2dd2d34c80cc811b55ccab68a18717677038f6cda48add9c94893fb0ca79dbf788ab5201bb8e1fd700e8e59534d5f66162cb7ebf2ad304bb
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/AppCode2017.1/config/sed4zkuc0
- Size 54B
- SHA256 250224c2a7eba8e8fd52c5fe558efe43dab02dc1c5565db280072ac3bdea9507
- MD5 cf4e01880e2fa3a44c45f24139aeef9f
- SHA1 c99c018c4f1acc0f4ebacac239a2d4821706753a
- SHA512 b0d92221bf96dea58b7c4a887b9b3950b172e58610ef3b586bbfd7a3c79b5653bb1e432877ebdaee737527026cd6f68f402eb886a363cbe8f70e73a47f28ccd9
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/AppCode2018.1/config/sedHrmCrI
- Size 54B
- SHA256 c539b8f772e27315b5df857ba82b2598f2465715516e88d98740cddafaff0d2a
- MD5 40cc0b7c92848e7d043e58b8ee055733
- SHA1 a6dfe95fbf9d80626463ea1ed3f2679e279a6e98
- SHA512 af2fd2e51a53a3a84e2b92c402487029902848675155c763b088409fb279b773ec9f48d1dc8aeaf4aa8804140f39cd4e88b7cfe0ece5aba2ec88323e10a53933
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/AppCode2019.1/config/sedUJh8Hq
- Size 54B
- SHA256 8731c72f22a9c7cfa8c7b5f255174e375a2c9f535030a86deb8a7a9e9c1fb76b
- MD5 5d9a28a9ebc4026decee10655f3f87a9
- SHA1 262920fbdb1236d5a7fd5adf94222dc29a4d9335
- SHA512 c5287ef9ed6e5fd374390ed7926f878282cbde8a6ef70b67b660a87fbb70e1cec3fa57c031f2c016ee899c6f504437095928c1f173251179bf692847fa67b177
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/~/micool/config/dns.conf
- Size 25B
- SHA256 7965272fbdbcfc3255c5b6598e3c118f3dd898834ba4f2e91b6eff1b57fdc06c
- MD5 14fd644eec8003eb6f887d037d8a5782
- SHA1 77bbb4b2ec2267bb4c53ed9e8d9b9641da185c7d
- SHA512 bb08c1d2634cc550adf612df501d9ffe4bb4b33441bd37e8b371b57a209b862e33df2ec76e444ce3e58bb6459c3e36bef588749445d72fd069004fd8cc5e563b
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/~/micool/config/mymap.conf
- Size 95B
- SHA256 88729850e6563281d5d71677138e8ba814fc616e632aa87dd78d42a32ef69eab
- MD5 fb6122abc94fc90c0ef8584564c377e1
- SHA1 85cfb558a4378609dc1edb7f97c1d8c0b7753554
- SHA512 907b0845ef3b5109dcaab7192d683e77502dc4f059384f8e90591a1dddec54ec1975f08f04bf5cbacaa68f2df8fe3d4486100c04bb591eccb174c1226c1082ec
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/~/micool/config/power.conf
- Size 5KB
- SHA256 f8cf031a60785f6f08a382ebd5a9792f29c1091a8892da59511c608039e47ca7
- MD5 b25976299912f9bfd8e9d308b8106704
- SHA1 405f62ff714fa3a13f594091e760c4a1da2ca3fe
- SHA512 a17db9a9f66336f3921075a72ee30d373300026e2ec67d3f772a2099b91d1bf1ca897425bfc8f3e18502cba6775ad12bae6b0a7be64f93d813870088fc776bf6
- SSDEEP 96:jtdzMUTS4KneGInqlDyz4qeNcPdeTxGH2rLHkaVx84be7PjLQIlwnQqsR:BpzS4KnehqO4qeNcFSE2r7Lf84ajjsKl
- MD5 SHA1 SHA512 SSDEEP
- Path /tmp/macjihuo-2022/~/micool/config/url.conf
- Size 74B
- SHA256 88e1dca8019ad412cf2c6fbd947a83786cffc7b32f1ee35594d25d1f38fae5f8
- MD5 fea2bfbedda20d5ad9429f537e15f4ce
- SHA1 0b219cc137a185439fb9bd99d85b8fe320967507
- SHA512 13fc087f41c6ab045bba514095db2be2ce383a6d5f58d50997af7073eba4729dc69f3dc30de6067237bbec2291e32400f79864ec8725450a2a5f5042097a862c
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/~/micool/micool.jar
- Size 47KB
- SHA256 3acc4e9d91793f6909458a4761b75b6da45c8868e75dca33c9fec63659202995
- MD5 2fa1b1364515dce93eb67c423b570deb
- SHA1 2a723c2ef30be4a5c167c6639bf9ec0b9c7e7ca2
- SHA512 0b6cf7caf6d48419251d0aa1ccf280536eb20b1f108f874a9ce86943601c2317833031578fc869366e3bc40dedfabfd64527598ea63b879bc77f82a9a218766b
- SSDEEP 768:Oh7IDIGjwZyHIwcctMtI+xIfo1UC6cB+P9146lp3fbYHfkWvQdptYc4klY:KSIG0ZuIQMtI+xIrTcB034673fbgvYI
- MD5 SHA1 SHA512 SSDEEP
- Path /tmp/macjihuo-2022/~/micool/plugins/dns.jar
- Size 4KB
- SHA256 d1150b1831b112b93d74a34a10ce6c11606e0d2255d532c29f91f1d92b40a552
- MD5 4f3c516c1704a5569725246d57dd1ae7
- SHA1 4e8693b5a7a3837cf7f6db0c4f1316f376d34721
- SHA512 f885fc751e9035944489578bb037f05521c6258c377c0c7bf8b8d10b799063e6e529c715ecebf9729724f0497f588803d7d463fbb70f5efbd73952624f60d08e
- SSDEEP 96:LSyBi1RBhx1yI/OEEKXejuu9lSx/xowSpTz7g8nJfTfTX:LSx1RBhx1y0OPhox/6fpTvgeRTfTX
- MD5 SHA1 SHA512 SSDEEP
- Path /tmp/macjihuo-2022/~/micool/plugins/hideme.jar
- Size 7KB
- SHA256 fa14c735ab9fed3f3a5df0dc78a5d38ae0a146099ddc858197e9f528bd996c40
- MD5 cdab6a30b0949a741f13935f5483c303
- SHA1 729d00e4fa04ca49c00b5b6aa60706dfadd5644e
- SHA512 bf155c0b062fe9c7c237f9b0329a155387b7294fae7c7ed73e41e9528f119ccc513855329f6e91e62106b589c8b215d981ed11f2f89c7e13c06fbdcf7d6d1ee8
- SSDEEP 96:ohFTqRYuFhXQ5GeiCGkeFUgbH44yY8NVFubQLwNUmvHh18OiPKwChme:gFuRDiiCSbH4u8ZuvOMBGOiEme
- MD5 SHA1 SHA512 SSDEEP
- Path /tmp/macjihuo-2022/~/micool/plugins/mymap-v1.0.1.jar
- Size 4KB
- SHA256 2a20c5f9a05820f522d9338c57aeac51232422af87ac299c3bb541e948549774
- MD5 7a0e7526ba7542c94fdc8f5bd0a4052c
- SHA1 37c069fdde8182879bf4958d703a19113bbae4ec
- SHA512 96bbb690f150322a8a86e88f013f749f55f67f41b4f5f19b78121d8d653b851c290c17e6e551b89e5ed37c38b1c408511cb67c5f15c627edf11a9ce61a480e89
- SSDEEP 96:Bn+DGJBqyu5t762MDaLFlFqz5e32NULTeDAjC4wK1Iuu:B+Mq35t7g+mAqULTLHwsIx
- MD5 SHA1 SHA512 SSDEEP
- Path /tmp/macjihuo-2022/~/micool/plugins/power.jar
- Size 9KB
- SHA256 7819e5b968ce5ea2e638e53d84089d35e89e9ea3088f18f8dbf6dd38d14ab25a
- MD5 d8711b73bc0507dbdc841b098af99787
- SHA1 26ee7577969265ff77a7fd786bcb707fe21a3d6b
- SHA512 dde478c503a5fbd17fd3cdac67d379abdb392d9edadc37feeafc3572f44044674af2f16e33b7c201fcb52e0d4eeb635fd53843b58700986aa380191aca6cc843
- SSDEEP 192:82u+Rd5aW2DJ1uPpz22NQUsLvA2EagRl3W8H:Du+loJ1EJ22dr1H
- MD5 SHA1 SHA512 SSDEEP
- Path /tmp/macjihuo-2022/~/micool/plugins/url.jar
- Size 4KB
- SHA256 ce5a83aee31153cca30274ac94467b316edea8cb28acf72f52f5a72d455b1b43
- MD5 6b181e5b8255db4cd9beb1c6af5f420e
- SHA1 b1bebbee8d98218db5794f596001b8b7427ae0c7
- SHA512 26dabc145da4a987744ab86d600ab81482771fb8fc99933828104d4698f4dc407eb97281a36f01d5852fc2209d0092f10b7d23d62db8f7e456f8d2d0a108ce7a
- SSDEEP 96:KPP4+DT0nUeKLB3pWsWJMN4j4pbxYQcTxBWUw3/6ws3U:IPLTLRZWsN+6xATHO3iN3U
- MD5 SHA1 SHA512 SSDEEP
- Path /tmp/macjihuo-2022/~/micool2017.jar
- Size 539KB
- SHA256 1818217b48e9b9222a60ce620f5f13e04172aaf7e2d79d700d20a83d733ebec0
- MD5 f5721587debebb34575e7a5c1267278c
- SHA1 e507fecf49457473a8f04323aa0538638ba158f5
- SHA512 a85a0c4c425c09d85b28eefdb4cfca10610a47bc882e81129857e40a92fdc905b44c0c9819cabd8e5fac61f4a5fff5b045f6946420cf76beb61e1fa84a8ac817
- SSDEEP 12288:xpO/iJYhkbPbOphhLfpIrXNF2grPnIMuVya71twqg6FETF:xE/2YmbPbWhMNk4PnIMuRSqg6FETF
- MD5 SHA1 SHA512 SSDEEP
- Path /tmp/macjihuo-2022/~/micool2018.jar
- Size 1002KB
- SHA256 da958394d79615d0d0d31190ed0b63b3959901067db72dfba223c7e3a844c8bc
- MD5 a577fe434dcf668222505d75eb4a9b58
- SHA1 3323d5d0b82e716609808090d3dc7cb3198b8c4b
- SHA512 e47be505914db6c93a196edf10043e6563a557d926210a7dd4b92376c1fb8ac74a9838270d9e85786d80b11847781fa000952a124400187a2c5cc22d0ca62052
- SSDEEP 12288:YUsNQ8ZLJ20ksC7Qy0qNS+Kkp9cM1CkpClVAoDqnWicYAi4DaqXCKPTTZysORKb:YUb8ZLJmQfDEv6DtiWrtXuZkfYcb
- MD5 SHA1 SHA512 SSDEEP
- Path /tmp/macjihuo-2022/~/micool2019.jar
- Size 2.3MB
- SHA256 e3055d5b636b39d5609b8cfa28da2d8955615985fad53a5c27baac51cadbc698
- MD5 b7650f3603805693d7633b64a755b416
- SHA1 de72619132579a7fde5a441f880955087d32f6ed
- SHA512 55c059b134c705460fc6ae4d5a1e87890dcda2a9dd8f587e6941f9003851fc703d04789d8ef58fd9e625fef86fc3a5cddebc2c25765a0444942da32f97d21ef0
- SSDEEP 49152:gxb6HEDaGHPVguuB1Gfgl5lXsfYCtfoPios0FNFDBrcLEmuYS:gxb6kDJH9dfglTXaltKioRfiEmu9
- MD5 SHA1 SHA512 SSDEEP
- Path /tmp/macjihuo-2022/~/yz/config/power.conf
- Size 5KB
- SHA256 b593043691cd24394b49be507800f20ea61faef157c26e10bf9982a467f69d65
- MD5 51b9fac208fc13ef7da9897eaa46c2a0
- SHA1 de03a814781e4426e324f98f8b70fb53fc615262
- SHA512 cf7fac6689349dc83a88377ef437c2a310fd647b14843067c4de31868bc683a8753edc6efd17cb82913067cc8a5ee82578c336e6fe8885056797439794c3472a
- SSDEEP 96:bkF0EMZDyz4qeNcPdeTxGH2rLHkakLneFRz6mIlwnQqsz:NO4qeNcFSE2r7LSI6mKwRw
- MD5 SHA1 SHA512 SSDEEP
- Path /tmp/macjihuo-2022/~/yz/fuzzes/config/dns.conf
- Size 67B
- SHA256 f098e501d16f260fc7fced68935bb63e52bddb660da3170edb5bc5026d6145c4
- MD5 f01ce69d967d52ddf0d72a1c9ca5c9bf
- SHA1 f7ea9dc8c67e8aa7b0495d23ecff7cbcf0dbc2e6
- SHA512 4c2f60204117d8ea1fefef6cd2fe7f4cd61f79fed0e834dac574a160aba579e1b6e6fae5cb4bdde2e6677ed53195bb4b7a232a600d7333eb4448b3be52fc1f75
- MD5 SHA1 SHA512
- Path /tmp/macjihuo-2022/~/yz/fuzzes/config/power.conf
- Size 7KB
- SHA256 5314860eae776e150d88f7869ccaa0d21ed281430cbf6de38a49358eb0f7b625
- MD5 bb2144dc9371c0dbb9a52ceb0fa2e723
- SHA1 bb1e5e197857c868c2ada0feef143fe0a37a6488
- SHA512 4d216364fdd27c18eb5de08f3e7e82788874bc9c623feca4300d7d4bc65356295a03440ff5c6003970012a77dc6e1d42c2fa225d06dd8c9e5456363cdeaeb189
- SSDEEP 192:npzS4KnehqO4qeNcFSE2r7LLKwRaJa9jIEa9jIvv:xSdjOVe/EsYJaTamv
- MD5 SHA1 SHA512 SSDEEP
- Path /tmp/macjihuo-2022/~/yz/fuzzes/plugins/power.jar
- Size 11KB
- SHA256 26db4a54482189dc989e59734318d5c12d656183d5394fe3c0fe5b33313cb785
- MD5 cdc01ec1abee702c535da143fb3947d9
- SHA1 0f73e2cf797ee4b25a73bc6f78cfd7d41952d294
- SHA512 72c26a50a1f1ab9712808a218cf8026c6540fbe6ebc28eb3fee3eddf011f8566e82446630731a559c2ad0ca684be486bd991fc46149f6412ac692218e4e1d354
- SSDEEP 192:W5aTR3/R61EZoMxX7GQyJ7UlcOgUN/5/9a1bN/:6c61PWX7a70V7N/R92R
- MD5 SHA1 SHA512 SSDEEP
- Path /tmp/macjihuo-2022/~/yz/plugins/power.jar
- Size 11KB
- SHA256 1f9f85ab767e29dd222ebdaff5f2a91a6c5716a1246cac2aa4e2028f92a76137
- MD5 d3e171f2099f3a6c644a603fe909b77e
- SHA1 a6b849ad3c95378ddc4132c842ef8a86d12606c9
- SHA512 2d8c0b81817a523e7e23209fc9195ccc11a2f6b9fbb5931994a04f9ed69503476e173a710dec87a534e023325014b5348548d51a45d46395681a8acce5e5b35c
- SSDEEP 192:+g6/9a1bMN/j5aCR3/R61EZofxX7GQ7J7UlcGI:+j92YN/N161PZX7b70a
- MD5 SHA1 SHA512 SSDEEP