Analysis
-
max time kernel
234s -
max time network
227s -
platform
macos-10.15_amd64 -
resource
macos-20240410-en -
resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
08-06-2024 22:50
Static task
static1
Behavioral task
behavioral1
Sample
code.js
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
code.js
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral3
Sample
code.js
Resource
android-x64-20240603-en
Behavioral task
behavioral4
Sample
code.js
Resource
android-x64-arm64-20240603-en
Behavioral task
behavioral5
Sample
code.js
Resource
macos-20240410-en
General
-
Target
code.js
-
Size
53B
-
MD5
09060c880d4e08ea0c721acd34649322
-
SHA1
78a66f613d023522fdc2a202fa1218c7f7fb01d8
-
SHA256
ccb15af07344d41d2db6ab2e27803adc34daa79a62382ae150c3959f1b891b4c
-
SHA512
c925abc960b7d60ce008c7c83bc63aec29394ed940ac23d45e346bdc961982f5208d258ab9920a95211243aba8065f4457da0b8b69fc8d9bbe52b7fb7c090390
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/code.js\""1⤵PID:483
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/code.js\""1⤵PID:483
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/code.js1⤵PID:483
-
/bin/zsh/bin/zsh -c /Users/run/code.js2⤵PID:486
-
/Users/run/code.js/Users/run/code.js2⤵PID:486
-
/bin/shsh /Users/run/code.js2⤵PID:486
-
/bin/bashsh /Users/run/code.js2⤵PID:486
-
ipconfig/all"ipconfig/all "3⤵PID:488
-
/usr/sbin/spctl/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app1⤵PID:530
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:545
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:546
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:547
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:547