Analysis

  • max time kernel
    136s
  • max time network
    142s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    02/08/2024, 14:40

General

  • Target

    Stampy World Download 11 Official/DIM1/entities/r.-2.1.mca

  • Size

    32KB

  • MD5

    84087285b7f2646153f0ad3bbd8e845c

  • SHA1

    e802a187a609a38f8a5891a1c9f888e96d129a2d

  • SHA256

    ccfe78cfa58dee7851f107501d21c243e5d89b3a840213a681cd26e289332a66

  • SHA512

    b47385179dd8e8329cb9a9add98487cacaa3cb9aae353c38bae70df9a64883a818791030840ef2f423f87d72a742276f04a3ab970f0f6e246240740b644c1fb8

  • SSDEEP

    12:5uyMtgbVMtgAP8Mtgbk8KMtgnMtg4MtgL:E7Q

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Stampy World Download 11 Official/DIM1/entities/r.-2.1.mca\""
    1⤵
      PID:507
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Stampy World Download 11 Official/DIM1/entities/r.-2.1.mca\""
      1⤵
        PID:507
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/Stampy World Download 11 Official/DIM1/entities/r.-2.1.mca"
        1⤵
          PID:507
          • /bin/zsh
            /bin/zsh -c "/Users/run/Stampy World Download 11 Official/DIM1/entities/r.-2.1.mca"
            2⤵
              PID:508
            • /Users/run/Stampy
              /Users/run/Stampy World Download 11 Official/DIM1/entities/r.-2.1.mca
              2⤵
                PID:508
            • /bin/launchctl
              /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
              1⤵
                PID:517
              • /bin/launchctl
                /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
                1⤵
                  PID:518
                • /usr/libexec/xpcproxy
                  xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
                  1⤵
                    PID:524
                  • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                    /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                    1⤵
                      PID:524

                    Network

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads