Analysis

  • max time kernel
    130s
  • max time network
    144s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    01-08-2024 22:26

General

  • Target

    TinkaOTP/TinkaOTP.app/Contents/Frameworks/libswiftCoreFoundation.dylib

  • Size

    40KB

  • MD5

    e3eb4e9173e1d9a66c656a7384f07ab1

  • SHA1

    bdec1c5c8273327fc07a5689ad2321ba182eae6d

  • SHA256

    ae58fba52683c5aa79f5bc7d9f7c10a90a8189e5abe141308961ac1e992c2f95

  • SHA512

    8ed3c32c3e51359ae563bbdb2d9b20c0e6a015ca44226bea4c09c408ad6b9577bb1ce8a98a1fd882395762d5729f9c9d208e60ed10249dea650051ec93386c0b

  • SSDEEP

    96:xYpziNzFQ8EyM2ySuZEs6rSTpCoXkA1qTgj:SzAzqiMDWrSTN1Qg

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/TinkaOTP/TinkaOTP.app/Contents/Frameworks/libswiftCoreFoundation.dylib\""
    1⤵
      PID:479
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/TinkaOTP/TinkaOTP.app/Contents/Frameworks/libswiftCoreFoundation.dylib\""
      1⤵
        PID:479
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/TinkaOTP/TinkaOTP.app/Contents/Frameworks/libswiftCoreFoundation.dylib
        1⤵
          PID:479
          • /bin/zsh
            /bin/zsh -c /Users/run/TinkaOTP/TinkaOTP.app/Contents/Frameworks/libswiftCoreFoundation.dylib
            2⤵
              PID:481
            • /Users/run/TinkaOTP/TinkaOTP.app/Contents/Frameworks/libswiftCoreFoundation.dylib
              /Users/run/TinkaOTP/TinkaOTP.app/Contents/Frameworks/libswiftCoreFoundation.dylib
              2⤵
                PID:481

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads