Analysis
- max time kernel
366s - max time network
393s - platform
macos-10.15_amd64 - resource
macos-20240711.1-en - resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
12/07/2024, 22:07
Behavioral task
behavioral1
Sample
Modrinth_Installer.exe
Resource
win10-20240404-en
20 signatures
600 seconds
Behavioral task
behavioral2
Sample
Modrinth_Installer.exe
Resource
macos-20240711.1-en
0 signatures
600 seconds
General
- Target Modrinth_Installer.exe
- Size 6.4MB
- Sample240712-11ynnsvbqf
- SHA256 a404a3f5f652da82f09f870d81476a452cae36f4a1378f90ec8ff06d6691e8cb
- MD5 1dba4e07fc018ea2f1d40969dbba02e6
- SHA1 e4b6c58846286c6f3dc5eb51cdb3086a78f25606
- SHA512 7add82374742df98c05913bc4c5a8a32fbadc44aa29c4c97f14f5a0ea1887fb04e4385a4a87d958128f5a1f74df449e5164ed5603089a06b40621ced5c57d3c2
- SSDEEP 98304:NbjIgtzNT+6HE4ThcGalSS9d+udj3mYcCqQcgT3XV8tEbETvsDHaLqV710ZZ9rPE:NfI+/HMlS2JxmYcmcg7XGqb6Msq51GPE
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Modrinth_Installer.exe\""1⤵PID:478
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Modrinth_Installer.exe\""1⤵PID:478
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Modrinth_Installer.exe1⤵PID:478
-
/bin/zsh/bin/zsh -c /Users/run/Modrinth_Installer.exe2⤵PID:479
-
-
/Users/run/Modrinth_Installer.exe/Users/run/Modrinth_Installer.exe2⤵PID:479
-
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:514
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:515
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:521
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:521
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:535
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:535
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:536
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:536