Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
4Static
static
1iconik Age...64.dmg
macos-10.15-amd64
4iconik Age... (GPU)
macos-10.15-amd64
1iconik Age...kAgent
macos-10.15-amd64
1iconik Age...Helper
macos-10.15-amd64
4iconik Age...dex.js
macos-10.15-amd64
4iconik Age...t-util
macos-10.15-amd64
4iconik Age...dex.js
macos-10.15-amd64
4iconik Age...oad.js
macos-10.15-amd64
4iconik Age...ile.js
macos-10.15-amd64
4iconik Age...ker.js
macos-10.15-amd64
4iconik Age...er1.js
macos-10.15-amd64
4iconik Age...x.html
macos-10.15-amd64
4iconik Age...dex.js
macos-10.15-amd64
4iconik Age...oad.js
macos-10.15-amd64
4iconik Age...x.html
macos-10.15-amd64
4iconik Age...dex.js
macos-10.15-amd64
4iconik Age...oad.js
macos-10.15-amd64
4Analysis
-
max time kernel
143s -
max time network
271s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
15/07/2024, 10:51
Static task
static1
Behavioral task
behavioral1
Sample
iconik Agent-24.6.0-x64.dmg
Resource
macos-20240711.1-en
Behavioral task
behavioral2
Sample
iconik Agent/iconik Agent.app/Contents/Frameworks/iconik Agent Helper (GPU).app/Contents/MacOS/iconik Agent Helper (GPU)
Resource
macos-20240711.1-en
Behavioral task
behavioral3
Sample
iconik Agent/iconik Agent.app/Contents/MacOS/iconikAgent
Resource
macos-20240711.1-en
Behavioral task
behavioral4
Sample
iconik Agent/iconik Agent.app/Contents/Resources/IconikFCPXHelper.app/Contents/MacOS/IconikFCPXHelper
Resource
macos-20240711.1-en
Behavioral task
behavioral5
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/314.index.js
Resource
macos-20240711.1-en
Behavioral task
behavioral6
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/certificate/cert-util
Resource
macos-20240711.1-en
Behavioral task
behavioral7
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/index.js
Resource
macos-20240711.1-en
Behavioral task
behavioral8
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/native_modules/electron-log-preload.js
Resource
macos-20240711.1-en
Behavioral task
behavioral9
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/native_modules/file.js
Resource
macos-20240711.1-en
Behavioral task
behavioral10
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/native_modules/worker.js
Resource
macos-20240711.1-en
Behavioral task
behavioral11
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/native_modules/worker1.js
Resource
macos-20240711.1-en
Behavioral task
behavioral12
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.html
Resource
macos-20240711.1-en
Behavioral task
behavioral13
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.js
Resource
macos-20240711.1-en
Behavioral task
behavioral14
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/preload.js
Resource
macos-20240711.1-en
Behavioral task
behavioral15
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/preferences_window/index.html
Resource
macos-20240711.1-en
Behavioral task
behavioral16
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/preferences_window/index.js
Resource
macos-20240711.1-en
Behavioral task
behavioral17
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/preferences_window/preload.js
Resource
macos-20240711.1-en
General
-
Target
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.js
-
Size
1.2MB
-
MD5
b68881d734c5d7b77a5e3fefe86a3b0a
-
SHA1
c47e57f033ef27f827274eb82fee07c3242b1590
-
SHA256
94f1b4b8e29b052fbf6cd0c35318aa543fe4a8d1d1efdf0fa545fe18c5af7b73
-
SHA512
cc5eac2c9a77c77fa1a5c40677196977b085beb81d320b6f14bf3e8c4f5431a3f770766e210a4a456294cd36a7af1b13a82987a9f5e02229087c6d11c00f6053
-
SSDEEP
12288:hkLgYSx7bLtRUO0B0AooIPvvrBIJWjG8Uj+elP3sQ5SRV:hQY7bpbthrioi8UjTtcwSRV
Malware Config
Signatures
-
Resource Forking 1 TTPs 4 IoCs
Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.
ioc Process /Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.js Process not Found sh -c "sudo /bin/zsh -c \"/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.js\"" Process not Found sudo /bin/zsh -c "/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.js" Process not Found /bin/zsh -c "/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.js" Process not Found
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.js\""1⤵PID:477
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.js\""1⤵PID:477
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.js"1⤵PID:477
-
/bin/zsh/bin/zsh -c "/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.js"2⤵PID:478
-
-
/Users/run/iconik/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.js2⤵PID:478
-