Analysis
-
max time kernel
0s -
max time network
131s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
16-06-2024 17:16
Static task
static1
Behavioral task
behavioral1
Sample
Contents/Frameworks/libdownload.dylib
Resource
macos-20240611-en
Behavioral task
behavioral2
Sample
Contents/MacOS/Installer
Resource
macos-20240611-en
Behavioral task
behavioral3
Sample
Contents/Resources/install.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral4
Sample
Contents/Resources/install.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral5
Sample
Contents/Resources/install.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral6
Sample
Contents/Resources/install.sh
Resource
debian9-mipsel-20240611-en
General
-
Target
Contents/Resources/install.sh
-
Size
914B
-
MD5
f0a9af5988e615700c24949448bc14db
-
SHA1
8931391ef5f6d10e66bbf4e755802db77183bfc3
-
SHA256
a1b2872bd8f0fd7e4dd53ceac27431148afc6268096b3cf58300b3ff47c0f181
-
SHA512
39754768432ce07f0a03971b0306ee1f9e7827e41f1215240b04f6a9f5cef58c70d553add8714235977535d0c26965d0a261155cbffb9bd1a6a604e27386e3f7
Malware Config
Signatures
Processes
-
/tmp/Contents/Resources/install.sh/tmp/Contents/Resources/install.sh1⤵PID:1496
-
/bin/mktempmktemp -d -t mount2⤵PID:1499
-
/usr/bin/yesyes2⤵PID:1501
-
/usr/bin/rsyncrsync -a --delete --progress "/*.app" /Applications/2⤵PID:1503
-
/usr/bin/basenamebasename "/*.app"2⤵PID:1506
-
/bin/rmdirrmdir2⤵PID:1508
-
/bin/rmrm2⤵PID:1509