Overview
overview
4Static
static
1R-U-Dead-Yet.zip
macos-10.15-amd64
1R-U-Dead-Y...tar.gz
macos-10.15-amd64
1R-U-Dead-Yet.tar
macos-10.15-amd64
4BeautifulSoup.py
macos-10.15-amd64
1README.txt
macos-10.15-amd64
rudeadyet.conf
macos-10.15-amd64
4socks.py
macos-10.15-amd64
4R-U-Dead-Y...tar.gz
macos-10.15-amd64
4R-U-Dead-Yet-v2.1.tar
macos-10.15-amd64
1BeautifulSoup.py
macos-10.15-amd64
4README.txt
macos-10.15-amd64
4rudeadyet.conf
macos-10.15-amd64
1socks.py
macos-10.15-amd64
4R-U-Dead-Yet.tar.gz
macos-10.15-amd64
R-U-Dead-Yet.tar
macos-10.15-amd64
1r-u-dead-y...oup.py
macos-10.15-amd64
4r-u-dead-y...ME.txt
macos-10.15-amd64
1r-u-dead-y...t.conf
macos-10.15-amd64
4r-u-dead-y...tar.gz
macos-10.15-amd64
1r-u-dead-yet-v2.2.tar
macos-10.15-amd64
rudy/BeautifulSoup.py
macos-10.15-amd64
1rudy/README
macos-10.15-amd64
4rudy/rudeadyet.conf
macos-10.15-amd64
4rudy/socks.py
macos-10.15-amd64
1Analysis
-
max time kernel
81s -
max time network
126s -
platform
macos-10.15_amd64 -
resource
macos-20240611-en -
resource tags
arch:amd64arch:i386image:macos-20240611-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
08/07/2024, 13:46
Static task
static1
Behavioral task
behavioral1
Sample
R-U-Dead-Yet.zip
Resource
macos-20240611-en
Behavioral task
behavioral2
Sample
R-U-Dead-Yet-v2.0.tar.gz
Resource
macos-20240611-en
Behavioral task
behavioral3
Sample
R-U-Dead-Yet.tar
Resource
macos-20240611-en
Behavioral task
behavioral4
Sample
BeautifulSoup.py
Resource
macos-20240611-en
Behavioral task
behavioral5
Sample
README.txt
Resource
macos-20240611-en
Behavioral task
behavioral6
Sample
rudeadyet.conf
Resource
macos-20240611-en
Behavioral task
behavioral7
Sample
socks.py
Resource
macos-20240611-en
Behavioral task
behavioral8
Sample
R-U-Dead-Yet-v2.1.tar.gz
Resource
macos-20240611-en
Behavioral task
behavioral9
Sample
R-U-Dead-Yet-v2.1.tar
Resource
macos-20240611-en
Behavioral task
behavioral10
Sample
BeautifulSoup.py
Resource
macos-20240611-en
Behavioral task
behavioral11
Sample
README.txt
Resource
macos-20240611-en
Behavioral task
behavioral12
Sample
rudeadyet.conf
Resource
macos-20240611-en
Behavioral task
behavioral13
Sample
socks.py
Resource
macos-20240611-en
Behavioral task
behavioral14
Sample
R-U-Dead-Yet.tar.gz
Resource
macos-20240611-en
Behavioral task
behavioral15
Sample
R-U-Dead-Yet.tar
Resource
macos-20240611-en
Behavioral task
behavioral16
Sample
r-u-dead-yet/BeautifulSoup.py
Resource
macos-20240611-en
Behavioral task
behavioral17
Sample
r-u-dead-yet/README.txt
Resource
macos-20240611-en
Behavioral task
behavioral18
Sample
r-u-dead-yet/rudeadyet.conf
Resource
macos-20240611-en
Behavioral task
behavioral19
Sample
r-u-dead-yet-v2.2.tar.gz
Resource
macos-20240611-en
Behavioral task
behavioral20
Sample
r-u-dead-yet-v2.2.tar
Resource
macos-20240611-en
Behavioral task
behavioral21
Sample
rudy/BeautifulSoup.py
Resource
macos-20240611-en
Behavioral task
behavioral22
Sample
rudy/README
Resource
macos-20240611-en
Behavioral task
behavioral23
Sample
rudy/rudeadyet.conf
Resource
macos-20240611-en
Behavioral task
behavioral24
Sample
rudy/socks.py
Resource
macos-20240611-en
General
-
Target
R-U-Dead-Yet.tar
-
Size
92KB
-
MD5
b7dd6b0a481368ec696ff7723e398635
-
SHA1
3b156208a2e27d6f43a234b27aa49a169d487821
-
SHA256
64aa6094845f9db9966c575cdbf76dfab4c96e2a4e7f8874c8bdae890e6ae16a
-
SHA512
21509626d76c64b022d1cf0b41633967fc2ef41a570866aa6fce387f7664fd8bdb1321d8faf32369305ee9695626527e978f8223152025643c1a108e2fea81ee
-
SSDEEP
1536:E1DVd8Rl69/i96UOv1Vexz/HOEsDtWM4c6jr85UNwSB/fyZOIUn1ev:E1DAgi96UOv1Vexz/HHsDtWM4c6jr85/
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/R-U-Dead-Yet.tar\""1⤵PID:531
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/R-U-Dead-Yet.tar\""1⤵PID:531
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/R-U-Dead-Yet.tar1⤵PID:531
-
/bin/zsh/bin/zsh -c /Users/run/R-U-Dead-Yet.tar2⤵PID:534
-
-
/Users/run/R-U-Dead-Yet.tar/Users/run/R-U-Dead-Yet.tar2⤵PID:534
-
-
/usr/bin/pluginkit/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync1⤵PID:571
-
/usr/sbin/spctl/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdaterBCBF2C69/OneDrive.app1⤵PID:572