Analysis

  • max time kernel
    0s
  • max time network
    130s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240508-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    06/06/2024, 12:31

General

  • Target
    macjihuo-2022/mac.sh
  • Size 535B
  • Sample240606-pp14wafb28
  • SHA256 f5146a9c3933273dcd1eb1d8badda6f1006a22654d199e94d14c7c90d4700a90
  • MD5 SHA1 SHA512
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 5 IoCs

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory 64 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/macjihuo-2022/mac.sh
    /tmp/macjihuo-2022/mac.sh
    1⤵
      PID:1517
      • /bin/sed
        sed -i s/bianliang1//g micool_macconfig/JetBrains/AppCode2020.1/appcode.vmoptions micool_macconfig/JetBrains/AppCode2020.2/appcode.vmoptions micool_macconfig/JetBrains/AppCode2020.3/appcode.vmoptions micool_macconfig/JetBrains/AppCode2021.1/appcode.vmoptions micool_macconfig/JetBrains/AppCode2021.2/appcode.vmoptions micool_macconfig/JetBrains/AppCode2021.3/appcode.vmoptions micool_macconfig/JetBrains/AppCode2022.1/appcode.vmoptions micool_macconfig/JetBrains/AppCode2022.2/appcode.vmoptions micool_macconfig/JetBrains/AppCode2022.3/appcode.vmoptions micool_macconfig/JetBrains/Clion2020.1/clion.vmoptions micool_macconfig/JetBrains/Clion2020.2/clion.vmoptions micool_macconfig/JetBrains/Clion2020.3/clion.vmoptions micool_macconfig/JetBrains/Clion2021.1/clion.vmoptions micool_macconfig/JetBrains/Clion2021.2/clion.vmoptions micool_macconfig/JetBrains/Clion2021.3/clion.vmoptions micool_macconfig/JetBrains/Clion2022.1/clion.vmoptions micool_macconfig/JetBrains/Clion2022.2/clion.vmoptions micool_macconfig/JetBrains/Clion2022.3/clion.vmoptions micool_macconfig/JetBrains/DataSpell2020.1/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2020.2/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2020.3/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2021.1/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2021.2/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2021.3/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2022.1/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2022.2/dataspell.vmoptions micool_macconfig/JetBrains/DataSpell2022.3/dataspell.vmoptions micool_macconfig/JetBrains/Datagrip2020.1/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2020.2/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2020.3/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2021.1/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2021.2/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2021.3/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2022.1/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2022.2/datagrip.vmoptions micool_macconfig/JetBrains/Datagrip2022.3/datagrip.vmoptions micool_macconfig/JetBrains/Goland2020.1/goland.vmoptions micool_macconfig/JetBrains/Goland2020.2/goland.vmoptions micool_macconfig/JetBrains/Goland2020.3/goland.vmoptions micool_macconfig/JetBrains/Goland2021.1/goland.vmoptions micool_macconfig/JetBrains/Goland2021.2/goland.vmoptions micool_macconfig/JetBrains/Goland2021.3/goland.vmoptions micool_macconfig/JetBrains/Goland2022.1/goland.vmoptions micool_macconfig/JetBrains/Goland2022.2/goland.vmoptions micool_macconfig/JetBrains/Goland2022.3/goland.vmoptions micool_macconfig/JetBrains/IntelliJIdea2020.1/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2020.2/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2020.3/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2021.1/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2021.2/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2021.3/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2022.1/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2022.2/idea.vmoptions micool_macconfig/JetBrains/IntelliJIdea2022.3/idea.vmoptions micool_macconfig/JetBrains/PhpStorm2020.1/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2020.2/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2020.3/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2021.1/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2021.2/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2021.3/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2022.1/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2022.2/phpstorm.vmoptions micool_macconfig/JetBrains/PhpStorm2022.3/phpstorm.vmoptions micool_macconfig/JetBrains/PyCharm2020.1/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2020.2/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2020.3/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2021.1/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2021.2/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2021.3/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2022.1/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2022.2/pycharm.vmoptions micool_macconfig/JetBrains/PyCharm2022.3/pycharm.vmoptions micool_macconfig/JetBrains/Rider2020.1/rider.vmoptions micool_macconfig/JetBrains/Rider2020.2/rider.vmoptions micool_macconfig/JetBrains/Rider2020.3/rider.vmoptions micool_macconfig/JetBrains/Rider2021.1/rider.vmoptions micool_macconfig/JetBrains/Rider2021.2/rider.vmoptions micool_macconfig/JetBrains/Rider2021.3/rider.vmoptions micool_macconfig/JetBrains/Rider2022.1/rider.vmoptions micool_macconfig/JetBrains/Rider2022.2/rider.vmoptions micool_macconfig/JetBrains/Rider2022.3/rider.vmoptions micool_macconfig/JetBrains/RubyMine2020.1/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2020.2/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2020.3/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2021.1/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2021.2/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2021.3/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2022.1/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2022.2/rubymine.vmoptions micool_macconfig/JetBrains/RubyMine2022.3/rubymine.vmoptions micool_macconfig/JetBrains/WebStorm2020.1/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2020.2/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2020.3/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2021.1/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2021.2/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2021.3/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2022.1/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2022.2/webstorm.vmoptions micool_macconfig/JetBrains/WebStorm2022.3/webstorm.vmoptions
        2⤵
        • Reads runtime system information
        • Writes file to tmp directory
        PID:1518
      • /bin/sed
        sed -i s/bianliang1//g micool_macconfig/JetBrainsold/AppCode2017.1/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2017.2/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2017.3/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2018.1/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2018.2/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2018.3/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2019.1/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2019.2/config/appcode.vmoptions micool_macconfig/JetBrainsold/AppCode2019.3/config/appcode.vmoptions micool_macconfig/JetBrainsold/CLion2017.1/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2017.2/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2017.3/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2018.1/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2018.2/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2018.3/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2019.1/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2019.2/config/clion.vmoptions micool_macconfig/JetBrainsold/CLion2019.3/config/clion.vmoptions micool_macconfig/JetBrainsold/DataGrip2017.1/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2017.2/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2017.3/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2018.1/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2018.2/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2018.3/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2019.1/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2019.2/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataGrip2019.3/config/datagrip.vmoptions micool_macconfig/JetBrainsold/DataSpell2017.1/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2017.2/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2017.3/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2018.1/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2018.2/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2018.3/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2019.1/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2019.2/config/dataspell.vmoptions micool_macconfig/JetBrainsold/DataSpell2019.3/config/dataspell.vmoptions micool_macconfig/JetBrainsold/GoLand2017.1/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2017.2/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2017.3/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2018.1/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2018.2/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2018.3/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2019.1/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2019.2/config/goland.vmoptions micool_macconfig/JetBrainsold/GoLand2019.3/config/goland.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2017.1/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2017.2/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2017.3/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2018.1/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2018.2/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2018.3/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2019.1/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2019.2/config/idea.vmoptions micool_macconfig/JetBrainsold/IntelliJIdea2019.3/config/idea.vmoptions micool_macconfig/JetBrainsold/PhpStorm2017.1/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2017.2/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2017.3/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2018.1/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2018.2/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2018.3/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2019.1/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2019.2/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PhpStorm2019.3/config/phpstorm.vmoptions micool_macconfig/JetBrainsold/PyCharm2017.1/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2017.2/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2017.3/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2018.1/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2018.2/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2018.3/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2019.1/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2019.2/config/pycharm.vmoptions micool_macconfig/JetBrainsold/PyCharm2019.3/config/pycharm.vmoptions micool_macconfig/JetBrainsold/Rider2017.1/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2017.2/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2017.3/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2018.1/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2018.2/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2018.3/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2019.1/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2019.2/config/rider.vmoptions micool_macconfig/JetBrainsold/Rider2019.3/config/rider.vmoptions micool_macconfig/JetBrainsold/RubyMine2017.1/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2017.2/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2017.3/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2018.1/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2018.2/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2018.3/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2019.1/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2019.2/config/rubymine.vmoptions micool_macconfig/JetBrainsold/RubyMine2019.3/config/rubymine.vmoptions micool_macconfig/JetBrainsold/WebStorm2017.1/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2017.2/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2017.3/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2018.1/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2018.2/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2018.3/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2019.1/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2019.2/config/webstorm.vmoptions micool_macconfig/JetBrainsold/WebStorm2019.3/config/webstorm.vmoptions
        2⤵
        • Reads runtime system information
        • Writes file to tmp directory
        PID:1519
      • /bin/cp
        cp -fR micool_macconfig/configfile "~/"
        2⤵
        • Reads runtime system information
        • Writes file to tmp directory
        PID:1520
      • /bin/cp
        cp -fR micool_macconfig/JetBrains "~/Library/Application Support/"
        2⤵
        • Reads runtime system information
        PID:1521
      • /bin/cp
        cp -fR micool_macconfig/JetBrainsold "~/Library/Preferences/"
        2⤵
        • Reads runtime system information
        PID:1522

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          sedfRNL9V

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/AppCode2020.1/sedfRNL9V
          • Size 50B
          • SHA256 bee8c1dfefa2470f1b51c48fb19ec3fa7b4fa9d14d9e41c03d0e0730ae6ce580
          • MD5 SHA1 SHA512

          sedTjpylL

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/AppCode2021.3/sedTjpylL
          • Size 57B
          • SHA256 be9a4e426ae394b258615c25d697f693955a0e835e98e93c5090507a568faeea
          • MD5 SHA1 SHA512

          sedNAfotq

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/Clion2022.1/sedNAfotq
          • Size 207B
          • SHA256 58e089385510c36b905622ad88257a395109fb85e652d6ae46cd68462c94190b
          • MD5 SHA1 SHA512

          sed5nuDBZ

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/Clion2022.2/sed5nuDBZ
          • Size 207B
          • SHA256 d49b28503dcfb2e26d63b58ddccfa2f8f53608de5733b735c09e771f5036d2c1
          • MD5 SHA1 SHA512

          sedVxT0Lw

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/DataSpell2022.1/sedVxT0Lw
          • Size 194B
          • SHA256 e253568d4a6431812791388c6d22233e25e3244954b1f4b963aea6ccf2e54c82
          • MD5 SHA1 SHA512

          sedlnpLlD

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/Datagrip2022.1/sedlnpLlD
          • Size 210B
          • SHA256 7d867e416fb6a3463f1ae6a252663a4354607c1a651ce8679e12d2760a3063a7
          • MD5 SHA1 SHA512

          sed9ZtMiK

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/Goland2022.1/sed9ZtMiK
          • Size 201B
          • SHA256 8969161585abd68bcbb427d8901236282cc607c0f782439b5733e90e3f7d599e
          • MD5 SHA1 SHA512

          sedBj4WrR

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/IntelliJIdea2022.1/sedBj4WrR
          • Size 199B
          • SHA256 22af227aaf188e46f32f67f18604e08357612e6e6963a31dc8cdb1016e6b72fd
          • MD5 SHA1 SHA512

          sedJKAeLY

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/PhpStorm2022.1/sedJKAeLY
          • Size 203B
          • SHA256 5c6a4b82d3ebbdd4d925cd0ee23f007271017257d511bf253ab8239ca6d82e4c
          • MD5 SHA1 SHA512

          sedtsZeh6

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/PyCharm2022.1/sedtsZeh6
          • Size 202B
          • SHA256 15a1fa998df77ba6972b4acaf391d664baec416f90e1a199046aaa57451b47f9
          • MD5 SHA1 SHA512

          sedFTms0d

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/Rider2022.1/sedFTms0d
          • Size 207B
          • SHA256 388b8b9b40c466e05cf6c20dc18567a47f2fb938867c08cb77f6c855b67d0298
          • MD5 SHA1 SHA512

          sedvnb75t

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrains/WebStorm2022.1/sedvnb75t
          • Size 210B
          • SHA256 5d707c9b179e62951960556b6c979d69db1fa85ddda056644531a1005fc9dbf2
          • MD5 SHA1 SHA512

          sed4zkuc0

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/AppCode2017.1/config/sed4zkuc0
          • Size 54B
          • SHA256 250224c2a7eba8e8fd52c5fe558efe43dab02dc1c5565db280072ac3bdea9507
          • MD5 SHA1 SHA512

          sedHrmCrI

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/AppCode2018.1/config/sedHrmCrI
          • Size 54B
          • SHA256 c539b8f772e27315b5df857ba82b2598f2465715516e88d98740cddafaff0d2a
          • MD5 SHA1 SHA512

          sedUJh8Hq

          • Path /tmp/macjihuo-2022/micool_macconfig/JetBrainsold/AppCode2019.1/config/sedUJh8Hq
          • Size 54B
          • SHA256 8731c72f22a9c7cfa8c7b5f255174e375a2c9f535030a86deb8a7a9e9c1fb76b
          • MD5 SHA1 SHA512

          dns.conf

          • Path /tmp/macjihuo-2022/~/micool/config/dns.conf
          • Size 25B
          • SHA256 7965272fbdbcfc3255c5b6598e3c118f3dd898834ba4f2e91b6eff1b57fdc06c
          • MD5 SHA1 SHA512

          mymap.conf

          • Path /tmp/macjihuo-2022/~/micool/config/mymap.conf
          • Size 95B
          • SHA256 88729850e6563281d5d71677138e8ba814fc616e632aa87dd78d42a32ef69eab
          • MD5 SHA1 SHA512

          power.conf

          • Path /tmp/macjihuo-2022/~/micool/config/power.conf
          • Size 5KB
          • SHA256 f8cf031a60785f6f08a382ebd5a9792f29c1091a8892da59511c608039e47ca7
          • MD5 SHA1 SHA512 SSDEEP

          url.conf

          • Path /tmp/macjihuo-2022/~/micool/config/url.conf
          • Size 74B
          • SHA256 88e1dca8019ad412cf2c6fbd947a83786cffc7b32f1ee35594d25d1f38fae5f8
          • MD5 SHA1 SHA512

          micool.jar

          • Path /tmp/macjihuo-2022/~/micool/micool.jar
          • Size 47KB
          • SHA256 3acc4e9d91793f6909458a4761b75b6da45c8868e75dca33c9fec63659202995
          • MD5 SHA1 SHA512 SSDEEP

          dns.jar

          • Path /tmp/macjihuo-2022/~/micool/plugins/dns.jar
          • Size 4KB
          • SHA256 d1150b1831b112b93d74a34a10ce6c11606e0d2255d532c29f91f1d92b40a552
          • MD5 SHA1 SHA512 SSDEEP

          hideme.jar

          • Path /tmp/macjihuo-2022/~/micool/plugins/hideme.jar
          • Size 7KB
          • SHA256 fa14c735ab9fed3f3a5df0dc78a5d38ae0a146099ddc858197e9f528bd996c40
          • MD5 SHA1 SHA512 SSDEEP

          mymap-v1.0.1.jar

          • Path /tmp/macjihuo-2022/~/micool/plugins/mymap-v1.0.1.jar
          • Size 4KB
          • SHA256 2a20c5f9a05820f522d9338c57aeac51232422af87ac299c3bb541e948549774
          • MD5 SHA1 SHA512 SSDEEP

          power.jar

          • Path /tmp/macjihuo-2022/~/micool/plugins/power.jar
          • Size 9KB
          • SHA256 7819e5b968ce5ea2e638e53d84089d35e89e9ea3088f18f8dbf6dd38d14ab25a
          • MD5 SHA1 SHA512 SSDEEP

          url.jar

          • Path /tmp/macjihuo-2022/~/micool/plugins/url.jar
          • Size 4KB
          • SHA256 ce5a83aee31153cca30274ac94467b316edea8cb28acf72f52f5a72d455b1b43
          • MD5 SHA1 SHA512 SSDEEP

          micool2017.jar

          • Path /tmp/macjihuo-2022/~/micool2017.jar
          • Size 539KB
          • SHA256 1818217b48e9b9222a60ce620f5f13e04172aaf7e2d79d700d20a83d733ebec0
          • MD5 SHA1 SHA512 SSDEEP

          micool2018.jar

          • Path /tmp/macjihuo-2022/~/micool2018.jar
          • Size 1002KB
          • SHA256 da958394d79615d0d0d31190ed0b63b3959901067db72dfba223c7e3a844c8bc
          • MD5 SHA1 SHA512 SSDEEP

          micool2019.jar

          • Path /tmp/macjihuo-2022/~/micool2019.jar
          • Size 2.3MB
          • SHA256 e3055d5b636b39d5609b8cfa28da2d8955615985fad53a5c27baac51cadbc698
          • MD5 SHA1 SHA512 SSDEEP

          power.conf

          • Path /tmp/macjihuo-2022/~/yz/config/power.conf
          • Size 5KB
          • SHA256 b593043691cd24394b49be507800f20ea61faef157c26e10bf9982a467f69d65
          • MD5 SHA1 SHA512 SSDEEP

          dns.conf

          • Path /tmp/macjihuo-2022/~/yz/fuzzes/config/dns.conf
          • Size 67B
          • SHA256 f098e501d16f260fc7fced68935bb63e52bddb660da3170edb5bc5026d6145c4
          • MD5 SHA1 SHA512

          power.conf

          • Path /tmp/macjihuo-2022/~/yz/fuzzes/config/power.conf
          • Size 7KB
          • SHA256 5314860eae776e150d88f7869ccaa0d21ed281430cbf6de38a49358eb0f7b625
          • MD5 SHA1 SHA512 SSDEEP

          power.jar

          • Path /tmp/macjihuo-2022/~/yz/fuzzes/plugins/power.jar
          • Size 11KB
          • SHA256 26db4a54482189dc989e59734318d5c12d656183d5394fe3c0fe5b33313cb785
          • MD5 SHA1 SHA512 SSDEEP

          power.jar

          • Path /tmp/macjihuo-2022/~/yz/plugins/power.jar
          • Size 11KB
          • SHA256 1f9f85ab767e29dd222ebdaff5f2a91a6c5716a1246cac2aa4e2028f92a76137
          • MD5 SHA1 SHA512 SSDEEP