Resubmissions

02/08/2024, 15:24

240802-ss5g9azarq 1

02/08/2024, 15:20

240802-sq7vlazakn 4

02/08/2024, 15:19

240802-sp5nvatglh 1

Analysis

  • max time kernel
    95s
  • max time network
    126s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    02/08/2024, 15:19

General

  • Target

    shaders/lib/atmospherics/nightNebula.glsl

  • Size

    3KB

  • MD5

    31ee1190c787752e0888fd4200b8d3fd

  • SHA1

    f471c63c8e9747aab419e4b2ea5544adab2173d2

  • SHA256

    1eacc7b663acd0219042626b0d580ba4dd2010669060c9ea9a8400791aa21db6

  • SHA512

    4d0415e1c756b0d35a345b29ca04bf829e65baa6779e5aceedf4c7a5c41e284d7dcce23ab9398beed0e774605170cd39b45edd1211d45a1b74e4cfdf89f3c801

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/shaders/lib/atmospherics/nightNebula.glsl\""
    1⤵
      PID:495
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/shaders/lib/atmospherics/nightNebula.glsl\""
      1⤵
        PID:495
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/shaders/lib/atmospherics/nightNebula.glsl
        1⤵
          PID:495
          • /bin/zsh
            /bin/zsh -c /Users/run/shaders/lib/atmospherics/nightNebula.glsl
            2⤵
              PID:496
            • /Users/run/shaders/lib/atmospherics/nightNebula.glsl
              /Users/run/shaders/lib/atmospherics/nightNebula.glsl
              2⤵
                PID:496
              • /bin/sh
                sh /Users/run/shaders/lib/atmospherics/nightNebula.glsl
                2⤵
                  PID:496
                • /bin/bash
                  sh /Users/run/shaders/lib/atmospherics/nightNebula.glsl
                  2⤵
                    PID:496
                    • //
                      // Nebula implementation by flytrap "https://godotshaders.com/shader/2d-nebula-shader/ "
                      3⤵
                        PID:499
                  • /usr/libexec/xpcproxy
                    xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
                    1⤵
                      PID:548
                    • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                      /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                      1⤵
                        PID:548
                      • /bin/launchctl
                        /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
                        1⤵
                          PID:552
                        • /bin/launchctl
                          /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
                          1⤵
                            PID:553

                          Network

                          MITRE ATT&CK Matrix

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads