Analysis

  • max time kernel
    137s
  • max time network
    126s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240410-en
  • resource tags

    arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    08-06-2024 21:16

General

  • Target

    OPAutoClickerMac.zip

  • Size

    532KB

  • MD5

    c7989ca5a20d77cde17945d7b73c3f08

  • SHA1

    5db5ebd6b92a1414c88d2712f1b942c383017c5e

  • SHA256

    c376d4b358dcc87c617ac68b257fb1a2a26baa2abc281ebb458e9d4ce20f4737

  • SHA512

    48edaa4ca53a47211095663b32745d802378d85cd6f64f63331e816b8568379e1c62db6fb857254042b1300b4ca84cd5333f98e3ef333ca3c3cf4f82f0e18592

  • SSDEEP

    12288:T1k6aEJyjrOjR0GzYSJVZ39pVWOsNrVyD8egWeCqBBFJUxF:TO6aEojrE0G0y33fEOfYeCCqBv23

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/OPAutoClickerMac.zip\""
    1⤵
      PID:484
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/OPAutoClickerMac.zip\""
      1⤵
        PID:484
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/OPAutoClickerMac.zip
        1⤵
          PID:484
          • /bin/zsh
            /bin/zsh -c /Users/run/OPAutoClickerMac.zip
            2⤵
              PID:485
            • /Users/run/OPAutoClickerMac.zip
              /Users/run/OPAutoClickerMac.zip
              2⤵
                PID:485
            • /usr/bin/pluginkit
              /usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync
              1⤵
                PID:495
              • /usr/sbin/spctl
                /usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdater0BF23177/OneDrive.app
                1⤵
                  PID:496
                • /usr/sbin/spctl
                  /usr/sbin/spctl --assess --type execute /Applications/OneDrive.app
                  1⤵
                    PID:532
                  • /bin/launchctl
                    /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
                    1⤵
                      PID:539
                    • /bin/launchctl
                      /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
                      1⤵
                        PID:540

                      Network

                      MITRE ATT&CK Matrix

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads