Overview
overview
4Static
static
1ChatGPT_De...st.dmg
macos-10.15-amd64
4ChatGPT In...I.html
macos-10.15-amd64
4ChatGPT In...er.app
macos-10.15-amd64
4ChatGPT In...update
macos-10.15-amd64
1ChatGPT In...pdater
macos-10.15-amd64
1ChatGPT In...nloade
macos-10.15-amd64
1ChatGPT In...taller
macos-10.15-amd64
1ChatGPT In...hatGPT
macos-10.15-amd64
1ChatGPT In...min.js
macos-10.15-amd64
4Analysis
-
max time kernel
137s -
max time network
121s -
platform
macos-10.15_amd64 -
resource
macos-20240611-en -
resource tags
arch:amd64arch:i386image:macos-20240611-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
27/06/2024, 12:18
Static task
static1
Behavioral task
behavioral1
Sample
ChatGPT_Desktop_public_latest.dmg
Resource
macos-20240611-en
Behavioral task
behavioral2
Sample
ChatGPT Installer/ChatGPT.app/Contents/Frameworks/ArkoseLabsKit.framework/Versions/A/Resources/ArkoseLabsAPI.html
Resource
macos-20240611-en
Behavioral task
behavioral3
Sample
ChatGPT Installer/ChatGPT.app/Contents/Frameworks/Sparkle.framework/Updater.app
Resource
macos-20240611-en
Behavioral task
behavioral4
Sample
ChatGPT Installer/ChatGPT.app/Contents/Frameworks/Sparkle.framework/Versions/B/Autoupdate
Resource
macos-20240611-en
Behavioral task
behavioral5
Sample
ChatGPT Installer/ChatGPT.app/Contents/Frameworks/Sparkle.framework/Versions/B/Updater.app/Contents/MacOS/Updater
Resource
macos-20240611-en
Behavioral task
behavioral6
Sample
ChatGPT Installer/ChatGPT.app/Contents/Frameworks/Sparkle.framework/Versions/B/XPCServices/Downloade
Resource
macos-20240611-en
Behavioral task
behavioral7
Sample
ChatGPT Installer/ChatGPT.app/Contents/Frameworks/Sparkle.framework/Versions/B/XPCServices/Installer
Resource
macos-20240611-en
Behavioral task
behavioral8
Sample
ChatGPT Installer/ChatGPT.app/Contents/MacOS/ChatGPT
Resource
macos-20240611-en
Behavioral task
behavioral9
Sample
ChatGPT Installer/ChatGPT.app/Contents/Resources/Highlightr_Highlightr.bundle/Contents/Resources/highlight.min.js
Resource
macos-20240611-en
General
-
Target
ChatGPT Installer/ChatGPT.app/Contents/Frameworks/Sparkle.framework/Versions/B/XPCServices/Downloade
-
Size
182KB
-
MD5
8da73dd2d32f27e801634c434bf133ea
-
SHA1
94286d9907e5b989ab96583d050382653b73bddc
-
SHA256
e186a3c5d4cafe40805da054ace26c037228e2305a939819279459d2665bfa47
-
SHA512
0a7b0791fce28e700e5130db42848d582e43a8bdce68509fb9ad8fadd31547a0937c160077473484dc0e33370a2c42bc70e347eaea82c6b3ae62fbd93d4a2e0c
-
SSDEEP
1536:VlY40w9lC7jIEjmrKYHGYKVrIbGIS3lTvX7IEKb2CwHGsBKE:/YCC7K//yTvXWG
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/ChatGPT Installer/ChatGPT.app/Contents/Frameworks/Sparkle.framework/Versions/B/XPCServices/Downloade\""1⤵PID:519
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/ChatGPT Installer/ChatGPT.app/Contents/Frameworks/Sparkle.framework/Versions/B/XPCServices/Downloade\""1⤵PID:519
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/ChatGPT Installer/ChatGPT.app/Contents/Frameworks/Sparkle.framework/Versions/B/XPCServices/Downloade"1⤵PID:519
-
/bin/zsh/bin/zsh -c "/Users/run/ChatGPT Installer/ChatGPT.app/Contents/Frameworks/Sparkle.framework/Versions/B/XPCServices/Downloade"2⤵PID:522
-
-
/Users/run/ChatGPT/Users/run/ChatGPT Installer/ChatGPT.app/Contents/Frameworks/Sparkle.framework/Versions/B/XPCServices/Downloade2⤵PID:522
-
-
/usr/bin/pluginkit/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync1⤵PID:520
-
/usr/sbin/spctl/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdater0B4C966A/OneDrive.app1⤵PID:521
-
/usr/libexec/xpcproxyxpcproxy com.apple.secinitd1⤵PID:523
-
/usr/libexec/secinitd/usr/libexec/secinitd1⤵PID:523
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:525
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:525
-
/usr/libexec/xpcproxyxpcproxy com.apple.pbs1⤵PID:541
-
/System/Library/CoreServices/pbs/System/Library/CoreServices/pbs1⤵PID:541
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
47KB
MD50e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA5121dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20
-
Filesize
4KB
MD5d3a1859e6ec593505cc882e6def48fc8
SHA1f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA2563ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
SHA512ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818