Analysis
-
max time kernel
306s -
max time network
430s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
21/07/2024, 03:01
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://jfrog.com/jfrog-and-github/?utm_source=google&utm_medium=cpc&utm_campaign=Search%7CDSK%7CGitHubDisplacement%7CAMER%7C202308&utm_term=github+server&gads_network=g&cq_plac=&cq_plt=gp&utm_content=u-bin&gads_campaign_id=20461824894&gads_adgroup_id=151245111574&gads_extension_id=&gads_target_id=kwd-1964604188326&gads_matchtype=b&gad_source=1&gbraid=0AAAAADqV85VXwD2cP6IkgvWdhHqk7Fr-_&gclid=Cj0KCQjwwO20BhCJARIsAAnTIVQSUO64Pnxl72GElQ5TJ7U2b71anYWlaG4B6NOiMEVrOowHwtHySE4aAtNIEALw_wcB
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
https://jfrog.com/jfrog-and-github/?utm_source=google&utm_medium=cpc&utm_campaign=Search%7CDSK%7CGitHubDisplacement%7CAMER%7C202308&utm_term=github+server&gads_network=g&cq_plac=&cq_plt=gp&utm_content=u-bin&gads_campaign_id=20461824894&gads_adgroup_id=151245111574&gads_extension_id=&gads_target_id=kwd-1964604188326&gads_matchtype=b&gad_source=1&gbraid=0AAAAADqV85VXwD2cP6IkgvWdhHqk7Fr-_&gclid=Cj0KCQjwwO20BhCJARIsAAnTIVQSUO64Pnxl72GElQ5TJ7U2b71anYWlaG4B6NOiMEVrOowHwtHySE4aAtNIEALw_wcB
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral3
Sample
https://jfrog.com/jfrog-and-github/?utm_source=google&utm_medium=cpc&utm_campaign=Search%7CDSK%7CGitHubDisplacement%7CAMER%7C202308&utm_term=github+server&gads_network=g&cq_plac=&cq_plt=gp&utm_content=u-bin&gads_campaign_id=20461824894&gads_adgroup_id=151245111574&gads_extension_id=&gads_target_id=kwd-1964604188326&gads_matchtype=b&gad_source=1&gbraid=0AAAAADqV85VXwD2cP6IkgvWdhHqk7Fr-_&gclid=Cj0KCQjwwO20BhCJARIsAAnTIVQSUO64Pnxl72GElQ5TJ7U2b71anYWlaG4B6NOiMEVrOowHwtHySE4aAtNIEALw_wcB
Resource
android-x64-20240624-en
Behavioral task
behavioral4
Sample
https://jfrog.com/jfrog-and-github/?utm_source=google&utm_medium=cpc&utm_campaign=Search%7CDSK%7CGitHubDisplacement%7CAMER%7C202308&utm_term=github+server&gads_network=g&cq_plac=&cq_plt=gp&utm_content=u-bin&gads_campaign_id=20461824894&gads_adgroup_id=151245111574&gads_extension_id=&gads_target_id=kwd-1964604188326&gads_matchtype=b&gad_source=1&gbraid=0AAAAADqV85VXwD2cP6IkgvWdhHqk7Fr-_&gclid=Cj0KCQjwwO20BhCJARIsAAnTIVQSUO64Pnxl72GElQ5TJ7U2b71anYWlaG4B6NOiMEVrOowHwtHySE4aAtNIEALw_wcB
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral5
Sample
https://jfrog.com/jfrog-and-github/?utm_source=google&utm_medium=cpc&utm_campaign=Search%7CDSK%7CGitHubDisplacement%7CAMER%7C202308&utm_term=github+server&gads_network=g&cq_plac=&cq_plt=gp&utm_content=u-bin&gads_campaign_id=20461824894&gads_adgroup_id=151245111574&gads_extension_id=&gads_target_id=kwd-1964604188326&gads_matchtype=b&gad_source=1&gbraid=0AAAAADqV85VXwD2cP6IkgvWdhHqk7Fr-_&gclid=Cj0KCQjwwO20BhCJARIsAAnTIVQSUO64Pnxl72GElQ5TJ7U2b71anYWlaG4B6NOiMEVrOowHwtHySE4aAtNIEALw_wcB
Resource
macos-20240711.1-en
General
-
Target
https://jfrog.com/jfrog-and-github/?utm_source=google&utm_medium=cpc&utm_campaign=Search%7CDSK%7CGitHubDisplacement%7CAMER%7C202308&utm_term=github+server&gads_network=g&cq_plac=&cq_plt=gp&utm_content=u-bin&gads_campaign_id=20461824894&gads_adgroup_id=151245111574&gads_extension_id=&gads_target_id=kwd-1964604188326&gads_matchtype=b&gad_source=1&gbraid=0AAAAADqV85VXwD2cP6IkgvWdhHqk7Fr-_&gclid=Cj0KCQjwwO20BhCJARIsAAnTIVQSUO64Pnxl72GElQ5TJ7U2b71anYWlaG4B6NOiMEVrOowHwtHySE4aAtNIEALw_wcB
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://jfrog.com/jfrog-and-github/?utm_source=google&utm_medium=cpc&utm_campaign=Search%7CDSK%7CGitHubDisplacement%7CAMER%7C202308&utm_term=github+server&gads_network=g&cq_plac=&cq_plt=gp&utm_content=u-bin&gads_campaign_id=20461824894&gads_adgroup_id=151245111574&gads_extension_id=&gads_target_id=kwd-1964604188326&gads_matchtype=b&gad_source=1&gbraid=0AAAAADqV85VXwD2cP6IkgvWdhHqk7Fr-_&gclid=Cj0KCQjwwO20BhCJARIsAAnTIVQSUO64Pnxl72GElQ5TJ7U2b71anYWlaG4B6NOiMEVrOowHwtHySE4aAtNIEALw_wcB\""1⤵PID:485
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://jfrog.com/jfrog-and-github/?utm_source=google&utm_medium=cpc&utm_campaign=Search%7CDSK%7CGitHubDisplacement%7CAMER%7C202308&utm_term=github+server&gads_network=g&cq_plac=&cq_plt=gp&utm_content=u-bin&gads_campaign_id=20461824894&gads_adgroup_id=151245111574&gads_extension_id=&gads_target_id=kwd-1964604188326&gads_matchtype=b&gad_source=1&gbraid=0AAAAADqV85VXwD2cP6IkgvWdhHqk7Fr-_&gclid=Cj0KCQjwwO20BhCJARIsAAnTIVQSUO64Pnxl72GElQ5TJ7U2b71anYWlaG4B6NOiMEVrOowHwtHySE4aAtNIEALw_wcB\""1⤵PID:485
-
/usr/bin/sudosudo /bin/zsh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://jfrog.com/jfrog-and-github/?utm_source=google&utm_medium=cpc&utm_campaign=Search%7CDSK%7CGitHubDisplacement%7CAMER%7C202308&utm_term=github+server&gads_network=g&cq_plac=&cq_plt=gp&utm_content=u-bin&gads_campaign_id=20461824894&gads_adgroup_id=151245111574&gads_extension_id=&gads_target_id=kwd-1964604188326&gads_matchtype=b&gad_source=1&gbraid=0AAAAADqV85VXwD2cP6IkgvWdhHqk7Fr-_&gclid=Cj0KCQjwwO20BhCJARIsAAnTIVQSUO64Pnxl72GElQ5TJ7U2b71anYWlaG4B6NOiMEVrOowHwtHySE4aAtNIEALw_wcB"1⤵PID:485
-
/bin/zsh/bin/zsh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://jfrog.com/jfrog-and-github/?utm_source=google&utm_medium=cpc&utm_campaign=Search%7CDSK%7CGitHubDisplacement%7CAMER%7C202308&utm_term=github+server&gads_network=g&cq_plac=&cq_plt=gp&utm_content=u-bin&gads_campaign_id=20461824894&gads_adgroup_id=151245111574&gads_extension_id=&gads_target_id=kwd-1964604188326&gads_matchtype=b&gad_source=1&gbraid=0AAAAADqV85VXwD2cP6IkgvWdhHqk7Fr-_&gclid=Cj0KCQjwwO20BhCJARIsAAnTIVQSUO64Pnxl72GElQ5TJ7U2b71anYWlaG4B6NOiMEVrOowHwtHySE4aAtNIEALw_wcB"2⤵PID:487
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:512
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:512