Overview

overview

4

Static

static

1

coinbase/a...er.jar

macos-10.15-amd64

4

coinbase/a...ew.bat

macos-10.15-amd64

1

coinbase/l...out.js

macos-10.15-amd64

1

coinbase/l...een.js

macos-10.15-amd64

1

coinbase/l...age.js

macos-10.15-amd64

1

coinbase/l...ets.js

macos-10.15-amd64

1

coinbase/l...out.js

macos-10.15-amd64

1

coinbase/l...ler.js

macos-10.15-amd64

1

coinbase/m...dow.js

macos-10.15-amd64

1

coinbase/w...x.html

macos-10.15-amd64

1

Analysis

  • max time kernel
    131s
  • max time network
    154s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    01-08-2024 21:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    coinbase/android/gradle/wrapper/gradle-wrapper.jar

  • Size

    52KB

  • MD5

    3ef954ed0adb79a5bd8a5303165fae05

  • SHA1

    92d0b85fb15ec7ca7aa72eaab4d5f7faac9297d1

  • SHA256

    16caeaf66d57a0d1d2087fef6a97efa62de8da69afa5b908f40db35afc4342da

  • SHA512

    c0f5fcc25b2dfa8b256f772443421312bb4bfd35200fe717afc4a63155e9b6629b9b081c3ac314230ff112a2d3ff497f0e296df024b23eae6de32dea3281244c

  • SSDEEP

    1536:Bx+CJ6wvQqbX/RbQOeh5ADzI0WxtK14XzzUdcv3kFP:yCJQCPJJeh5Aw0YqaQOf8

Score
4/10
execution

Malware Config

Signatures

  • JavaScript 1 TTPs 1 IoCs

    Adversaries may abuse various implementations of JavaScript for execution.

    execution

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"open /Users/run/coinbase/android/gradle/wrapper/gradle-wrapper.jar\""
    1⤵
      PID:510
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"open /Users/run/coinbase/android/gradle/wrapper/gradle-wrapper.jar\""
      1⤵
        PID:510
      • /usr/bin/sudo
        sudo /bin/zsh -c "open /Users/run/coinbase/android/gradle/wrapper/gradle-wrapper.jar"
        1⤵
          PID:510
          • /bin/zsh
            /bin/zsh -c "open /Users/run/coinbase/android/gradle/wrapper/gradle-wrapper.jar"
            2⤵
              PID:511
            • /usr/bin/open
              open /Users/run/coinbase/android/gradle/wrapper/gradle-wrapper.jar
              2⤵
                PID:511
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.JarLauncher.1532
              1⤵
                PID:512
              • /System/Library/CoreServices/Jar Launcher.app/Contents/MacOS/Jar Launcher
                "/System/Library/CoreServices/Jar Launcher.app/Contents/MacOS/Jar Launcher"
                1⤵
                  PID:512
                  • /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java
                    "/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java" -jar /Users/run/coinbase/android/gradle/wrapper/gradle-wrapper.jar
                    2⤵
                      PID:514
                  • /usr/libexec/xpcproxy
                    xpcproxy com.apple.metadata.mdwrite
                    1⤵
                      PID:513
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.audio.AudioComponentRegistrar
                      1⤵
                        PID:526
                      • /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
                        /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
                        1⤵
                          PID:526

                        Network

                        MITRE ATT&CK Enterprise v15

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads