Overview
overview
4Static
static
1R-U-Dead-Yet.zip
macos-10.15-amd64
1R-U-Dead-Y...tar.gz
macos-10.15-amd64
1R-U-Dead-Yet.tar
macos-10.15-amd64
4BeautifulSoup.py
macos-10.15-amd64
1README.txt
macos-10.15-amd64
rudeadyet.conf
macos-10.15-amd64
4socks.py
macos-10.15-amd64
4R-U-Dead-Y...tar.gz
macos-10.15-amd64
4R-U-Dead-Yet-v2.1.tar
macos-10.15-amd64
1BeautifulSoup.py
macos-10.15-amd64
4README.txt
macos-10.15-amd64
4rudeadyet.conf
macos-10.15-amd64
1socks.py
macos-10.15-amd64
4R-U-Dead-Yet.tar.gz
macos-10.15-amd64
R-U-Dead-Yet.tar
macos-10.15-amd64
1r-u-dead-y...oup.py
macos-10.15-amd64
4r-u-dead-y...ME.txt
macos-10.15-amd64
1r-u-dead-y...t.conf
macos-10.15-amd64
4r-u-dead-y...tar.gz
macos-10.15-amd64
1r-u-dead-yet-v2.2.tar
macos-10.15-amd64
rudy/BeautifulSoup.py
macos-10.15-amd64
1rudy/README
macos-10.15-amd64
4rudy/rudeadyet.conf
macos-10.15-amd64
4rudy/socks.py
macos-10.15-amd64
1Analysis
-
max time kernel
64s -
max time network
125s -
platform
macos-10.15_amd64 -
resource
macos-20240611-en -
resource tags
arch:amd64arch:i386image:macos-20240611-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
08-07-2024 13:46
Static task
static1
Behavioral task
behavioral1
Sample
R-U-Dead-Yet.zip
Resource
macos-20240611-en
Behavioral task
behavioral2
Sample
R-U-Dead-Yet-v2.0.tar.gz
Resource
macos-20240611-en
Behavioral task
behavioral3
Sample
R-U-Dead-Yet.tar
Resource
macos-20240611-en
Behavioral task
behavioral4
Sample
BeautifulSoup.py
Resource
macos-20240611-en
Behavioral task
behavioral5
Sample
README.txt
Resource
macos-20240611-en
Behavioral task
behavioral6
Sample
rudeadyet.conf
Resource
macos-20240611-en
Behavioral task
behavioral7
Sample
socks.py
Resource
macos-20240611-en
Behavioral task
behavioral8
Sample
R-U-Dead-Yet-v2.1.tar.gz
Resource
macos-20240611-en
Behavioral task
behavioral9
Sample
R-U-Dead-Yet-v2.1.tar
Resource
macos-20240611-en
Behavioral task
behavioral10
Sample
BeautifulSoup.py
Resource
macos-20240611-en
Behavioral task
behavioral11
Sample
README.txt
Resource
macos-20240611-en
Behavioral task
behavioral12
Sample
rudeadyet.conf
Resource
macos-20240611-en
Behavioral task
behavioral13
Sample
socks.py
Resource
macos-20240611-en
Behavioral task
behavioral14
Sample
R-U-Dead-Yet.tar.gz
Resource
macos-20240611-en
Behavioral task
behavioral15
Sample
R-U-Dead-Yet.tar
Resource
macos-20240611-en
Behavioral task
behavioral16
Sample
r-u-dead-yet/BeautifulSoup.py
Resource
macos-20240611-en
Behavioral task
behavioral17
Sample
r-u-dead-yet/README.txt
Resource
macos-20240611-en
Behavioral task
behavioral18
Sample
r-u-dead-yet/rudeadyet.conf
Resource
macos-20240611-en
Behavioral task
behavioral19
Sample
r-u-dead-yet-v2.2.tar.gz
Resource
macos-20240611-en
Behavioral task
behavioral20
Sample
r-u-dead-yet-v2.2.tar
Resource
macos-20240611-en
Behavioral task
behavioral21
Sample
rudy/BeautifulSoup.py
Resource
macos-20240611-en
Behavioral task
behavioral22
Sample
rudy/README
Resource
macos-20240611-en
Behavioral task
behavioral23
Sample
rudy/rudeadyet.conf
Resource
macos-20240611-en
Behavioral task
behavioral24
Sample
rudy/socks.py
Resource
macos-20240611-en
General
-
Target
rudy/BeautifulSoup.py
-
Size
77KB
-
MD5
1433407a87b3e41809a32d9e1220bd7f
-
SHA1
4bac895b7425f8a7b041a70312dcabf666a5802f
-
SHA256
70f06877192a463c9e1e03f1fb4d8752b0055e65b4d5ec7181a164711ff7182e
-
SHA512
98a57d2c8444eefe4a67593873e136ec5130b9d698941d71642aa1a606badc28c23f3008adb6e477ef52bbff9d58bc7720d4dd9335a1aef01c441a2b2339c02f
-
SSDEEP
1536:i1DVd8Rl69/i96UOv1Vexz/HOEsDtWM4c6jr85UNwSB/fyZOIU2:i1DAgi96UOv1Vexz/HHsDtWM4c6jr85b
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/rudy/BeautifulSoup.py\""1⤵PID:530
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/rudy/BeautifulSoup.py\""1⤵PID:530
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/rudy/BeautifulSoup.py1⤵PID:530
-
/bin/zsh/bin/zsh -c /Users/run/rudy/BeautifulSoup.py2⤵PID:533
-
-
/Users/run/rudy/BeautifulSoup.py/Users/run/rudy/BeautifulSoup.py2⤵PID:533
-
-
/bin/shsh /Users/run/rudy/BeautifulSoup.py2⤵PID:533
-
-
/bin/bashsh /Users/run/rudy/BeautifulSoup.py2⤵PID:533
-
-
/usr/bin/pluginkit/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync1⤵PID:572
-
/usr/sbin/spctl/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdaterBCBF2C69/OneDrive.app1⤵PID:573