Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
4Static
static
1iconik Age...64.dmg
macos-10.15-amd64
4iconik Age... (GPU)
macos-10.15-amd64
1iconik Age...kAgent
macos-10.15-amd64
1iconik Age...Helper
macos-10.15-amd64
4iconik Age...dex.js
macos-10.15-amd64
4iconik Age...t-util
macos-10.15-amd64
4iconik Age...dex.js
macos-10.15-amd64
4iconik Age...oad.js
macos-10.15-amd64
4iconik Age...ile.js
macos-10.15-amd64
4iconik Age...ker.js
macos-10.15-amd64
4iconik Age...er1.js
macos-10.15-amd64
4iconik Age...x.html
macos-10.15-amd64
4iconik Age...dex.js
macos-10.15-amd64
4iconik Age...oad.js
macos-10.15-amd64
4iconik Age...x.html
macos-10.15-amd64
4iconik Age...dex.js
macos-10.15-amd64
4iconik Age...oad.js
macos-10.15-amd64
4Analysis
-
max time kernel
199s -
max time network
303s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
15/07/2024, 10:51
Static task
static1
Behavioral task
behavioral1
Sample
iconik Agent-24.6.0-x64.dmg
Resource
macos-20240711.1-en
Behavioral task
behavioral2
Sample
iconik Agent/iconik Agent.app/Contents/Frameworks/iconik Agent Helper (GPU).app/Contents/MacOS/iconik Agent Helper (GPU)
Resource
macos-20240711.1-en
Behavioral task
behavioral3
Sample
iconik Agent/iconik Agent.app/Contents/MacOS/iconikAgent
Resource
macos-20240711.1-en
Behavioral task
behavioral4
Sample
iconik Agent/iconik Agent.app/Contents/Resources/IconikFCPXHelper.app/Contents/MacOS/IconikFCPXHelper
Resource
macos-20240711.1-en
Behavioral task
behavioral5
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/314.index.js
Resource
macos-20240711.1-en
Behavioral task
behavioral6
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/certificate/cert-util
Resource
macos-20240711.1-en
Behavioral task
behavioral7
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/index.js
Resource
macos-20240711.1-en
Behavioral task
behavioral8
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/native_modules/electron-log-preload.js
Resource
macos-20240711.1-en
Behavioral task
behavioral9
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/native_modules/file.js
Resource
macos-20240711.1-en
Behavioral task
behavioral10
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/native_modules/worker.js
Resource
macos-20240711.1-en
Behavioral task
behavioral11
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/native_modules/worker1.js
Resource
macos-20240711.1-en
Behavioral task
behavioral12
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.html
Resource
macos-20240711.1-en
Behavioral task
behavioral13
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/index.js
Resource
macos-20240711.1-en
Behavioral task
behavioral14
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/main_window/preload.js
Resource
macos-20240711.1-en
Behavioral task
behavioral15
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/preferences_window/index.html
Resource
macos-20240711.1-en
Behavioral task
behavioral16
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/preferences_window/index.js
Resource
macos-20240711.1-en
Behavioral task
behavioral17
Sample
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/renderer/preferences_window/preload.js
Resource
macos-20240711.1-en
General
-
Target
iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/314.index.js
-
Size
301KB
-
MD5
6c16279527f0a8b95c3d28c2d6780569
-
SHA1
53042b5cd6e77d83b61886c8b4dfa9290fa4a555
-
SHA256
b632ceb0570c2195803181c9363e5eb0da3e1dab709de93da183c55aa6204e7d
-
SHA512
9755ba15e8f6fc1a7853622f43d96872ccd42797c2fc5554b94eb6df5a33f4df59f54741a8d9ff7b389b4edbbc1003742034d22c8f6a06ba720ec57c05f1df2d
-
SSDEEP
1536:O4ZhbI4TlQ8g2GrPWJNM+lpLSwtAGf1CfKI9jT+Ul/xrZbkxLRIFeB2OMIrfA64m:OkbI4Xg96E+lUw9f1etAN8rl39M
Malware Config
Signatures
-
Resource Forking 1 TTPs 4 IoCs
Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.
ioc Process sudo /bin/zsh -c "/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/314.index.js" Process not Found /bin/zsh -c "/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/314.index.js" Process not Found /Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/314.index.js Process not Found sh -c "sudo /bin/zsh -c \"/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/314.index.js\"" Process not Found
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/314.index.js\""1⤵PID:492
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/314.index.js\""1⤵PID:492
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/314.index.js"1⤵PID:492
-
/bin/zsh/bin/zsh -c "/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/314.index.js"2⤵PID:499
-
-
/Users/run/iconik/Users/run/iconik Agent/iconik Agent.app/Contents/Resources/app/.webpack/main/314.index.js2⤵PID:499
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:509
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:509