Overview
overview
8Static
static
1iOSSystemRecovery.dmg
macos-10.15-amd64
8TunesKit i....dylib
macos-10.15-amd64
1TunesKit i...covery
macos-10.15-amd64
1TunesKit i....dylib
macos-10.15-amd64
1TunesKit i....dylib
macos-10.15-amd64
1TunesKit i....dylib
macos-10.15-amd64
1TunesKit i....dylib
macos-10.15-amd64
1TunesKit i....dylib
macos-10.15-amd64
1TunesKit i....dylib
macos-10.15-amd64
1TunesKit i....dylib
macos-10.15-amd64
1TunesKit i....dylib
macos-10.15-amd64
1TunesKit i....dylib
macos-10.15-amd64
1TunesKit i....dylib
macos-10.15-amd64
1TunesKit i....dylib
macos-10.15-amd64
1TunesKit i....dylib
macos-10.15-amd64
1Analysis
-
max time kernel
344s -
max time network
1809s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
03/08/2024, 07:20
Static task
static1
Behavioral task
behavioral1
Sample
iOSSystemRecovery.dmg
Resource
macos-20240711.1-en
Behavioral task
behavioral2
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/Frameworks/libiOSRestore.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral3
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/MacOS/TunesKit iOS System Recovery
Resource
macos-20240711.1-en
Behavioral task
behavioral4
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/bearer/libqcorewlanbearer.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral5
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/bearer/libqgenericbearer.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral6
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqgif.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral7
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqicns.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral8
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqico.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral9
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqjpeg.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral10
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqtga.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral11
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqtiff.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral12
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqwbmp.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral13
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqwebp.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral14
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/platforms/libqcocoa.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral15
Sample
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/printsupport/libcocoaprintersupport.dylib
Resource
macos-20240711.1-en
General
-
Target
TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqgif.dylib
-
Size
60KB
-
MD5
27c0c93a59505508d444f8e18c05539c
-
SHA1
92410ceaef729ba234aae5ab976610ee175d63a0
-
SHA256
a5d13a9f37e2f2c9c309d35dc6b8902630d09ab37ee659d437e67b71023dc4be
-
SHA512
6787f05427388653dde4e49a3c65af22f26a638832bdb020879be614f1c526c57dfb0a97cdb2a05e8c2f023b901abf18a21043b84d7fff33c5c133ebfa04eac9
-
SSDEEP
768:Q8YkfjxIeAfzE6+gCHc9ba1Gm6oCR78G8Zab8:HdkL+FHc01GNB7CZK
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqgif.dylib\""1⤵PID:493
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqgif.dylib\""1⤵PID:493
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqgif.dylib"1⤵PID:493
-
/bin/zsh/bin/zsh -c "/Users/run/TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqgif.dylib"2⤵PID:494
-
-
/Users/run/TunesKit/Users/run/TunesKit iOS System Recovery/TunesKit iOS System Recovery.app/Contents/PlugIns/imageformats/libqgif.dylib2⤵PID:494
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:511
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:511
-
/usr/libexec/xpcproxyxpcproxy com.apple.newsyslog1⤵PID:534
-
/usr/sbin/newsyslog/usr/sbin/newsyslog1⤵PID:534
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:543
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:543
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:544
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:544