19aea03297cf3e234930b462217a280753c241e4582bbb30513e485079ffb368 | Triage

Submit
Reports

Overview

overview

4

Static

static

1

coinbase/a...er.jar

macos-10.15-amd64

4

coinbase/a...ew.bat

macos-10.15-amd64

1

coinbase/l...out.js

macos-10.15-amd64

1

coinbase/l...een.js

macos-10.15-amd64

1

coinbase/l...age.js

macos-10.15-amd64

1

coinbase/l...ets.js

macos-10.15-amd64

1

coinbase/l...out.js

macos-10.15-amd64

1

coinbase/l...ler.js

macos-10.15-amd64

1

coinbase/m...dow.js

macos-10.15-amd64

1

coinbase/w...x.html

macos-10.15-amd64

1

Analysis

max time kernel
94s
max time network
158s
platform
macos-10.15_amd64
resource
macos-20240711.1-en
resource tags

arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
01-08-2024 21:09

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

coinbase/android/gradle/wrapper/gradle-wrapper.jar

Resource

macos-20240711.1-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

coinbase/android/gradlew.bat

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

coinbase/lib/pages/actual_cashout.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

coinbase/lib/pages/cashout_screen.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

coinbase/lib/pages/homepage.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

coinbase/lib/pages/my_assets.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

coinbase/lib/pages/preview_cashout.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

coinbase/lib/utils/balance_controller.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

coinbase/macos/Runner/MainFlutterWindow.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

coinbase/web/index.html

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Report Analysis Logs

General

Target

coinbase/lib/pages/homepage.js
Size

16KB
MD5

5f652326492e477eafd2ab74490ef728
SHA1

37e4eeaa836fd7568b964b22b93361ee9abfcef2
SHA256

6b74ef9c32bc8b2546f2eff4611e81114b272f9c1ee06289b7dd185e75f1509c
SHA512

784b7bdbd1da6e3902fc90dcb38eb513521378cd9d327d318df77a941d5e64672c740d3afc58419d678399768ca35c9ee8d8f8d4d5debf9dc5f24b43d352ee84
SSDEEP

192:79FKsrk/77wwmncbH+Ou0iqQ8SArdDbJRuYgHJ5amz01:RFKhp5b7

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/coinbase/lib/pages/homepage.js\""
1⤵
PID:487

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/coinbase/lib/pages/homepage.js\""
1⤵
PID:487

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/coinbase/lib/pages/homepage.js
1⤵
PID:487
- /bin/zsh
  /bin/zsh -c /Users/run/coinbase/lib/pages/homepage.js
  2⤵
  PID:488
- /Users/run/coinbase/lib/pages/homepage.js
  /Users/run/coinbase/lib/pages/homepage.js
  2⤵
  PID:488
- /bin/sh
  sh /Users/run/coinbase/lib/pages/homepage.js
  2⤵
  PID:488
- /bin/bash
  sh /Users/run/coinbase/lib/pages/homepage.js
  2⤵
  PID:488

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:559

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:559

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:561

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:562

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy