Resubmissions
Analysis
-
max time kernel
149s -
max time network
152s -
platform
macos-10.15_amd64 -
resource
macos-20240611-en -
resource tags
arch:amd64arch:i386image:macos-20240611-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
16-06-2024 17:18
Static task
static1
Behavioral task
behavioral1
Sample
Contents/Frameworks/libdownload.dylib
Resource
macos-20240611-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Contents/MacOS/Installer
Resource
macos-20240611-en
0 signatures
150 seconds
General
-
Target
Contents/MacOS/Installer
-
Size
141KB
-
MD5
d8e4eff6ca8ea8b85218e9351d7d0d44
-
SHA1
b3f11cf286f7de492ed593612ff5e0a90475e5dc
-
SHA256
3a0d7ea7c56534fcf1e068b2e11b52dd889bca916971786203ee3105760d905c
-
SHA512
c384edd7071fcb8754f269d528e1c116ce2c449842d778ba9e860d3184cd2bab535fac03a636c5fb61ec219cdb6d71441cbb87ebce801327e77ed7171614d3fe
-
SSDEEP
3072:eO6ECbVNslM5fglJthKo0mb4iVRQqbw7zJ5sYckuUo:eO6tZg522
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Contents/MacOS/Installer\""1⤵PID:532
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Contents/MacOS/Installer\""1⤵PID:532
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Contents/MacOS/Installer1⤵PID:532
-
/bin/zsh/bin/zsh -c /Users/run/Contents/MacOS/Installer2⤵PID:533
-
/Users/run/Contents/MacOS/Installer/Users/run/Contents/MacOS/Installer2⤵PID:533
-
/usr/bin/pluginkit/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync1⤵PID:562
-
/usr/sbin/spctl/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdaterBCBF2C69/OneDrive.app1⤵PID:563
-
/usr/sbin/spctl/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app1⤵PID:586
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:593
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:594
-
/usr/libexec/xpcproxyxpcproxy com.apple.PerformanceAnalysis.animationperfd1⤵PID:595
-
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd1⤵PID:595