Resubmissions

20-11-2024 06:38

241120-hd6fwssfla 3

03-08-2024 13:31

240803-qsqyravbjq 3

03-08-2024 13:26

240803-qptv8svajm 10

Analysis

  • max time kernel
    100s
  • max time network
    152s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    03-08-2024 13:26

General

  • Target

    bongo cat.exe

  • Size

    301KB

  • MD5

    b7067283b321191d6555082653665175

  • SHA1

    175641d8558ff5fdcfe5d410008fca5140f17c53

  • SHA256

    0ed3b73b3f8c77361ee617af553f2b88aa283317d0feae66ae0f7e1ab96a7d99

  • SHA512

    d97871b41b3953b5e99d78351be17b0805add38c0abbff9cdab4c88c2b5dd1df2067cae6485197990afff1ef7d50e12b70d93d106e1064efe9d8b73b03f9eaed

  • SSDEEP

    6144:peKoCiE/DFRaY4kdNQRhUUKtJ9Xzp+4wR4T+Ue6PPxBFO1:peKoC5/D3aidPHJDhw4+Ue6P

Score
4/10

Malware Config

Signatures

  • Resource Forking 1 TTPs 2 IoCs

    Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/bongo cat.exe\""
    1⤵
      PID:483
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/bongo cat.exe\""
      1⤵
        PID:483
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/bongo cat.exe"
        1⤵
          PID:483
          • /bin/zsh
            /bin/zsh -c "/Users/run/bongo cat.exe"
            2⤵
              PID:485
            • /Users/run/bongo
              /Users/run/bongo cat.exe
              2⤵
                PID:485
            • /usr/libexec/pkreporter
              /usr/libexec/pkreporter
              1⤵
                PID:471
              • /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater
                "/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater" -bgcheck
                1⤵
                  PID:477
                • /System/Library/PrivateFrameworks/SpeechObjects.framework/Versions/A/SpeechDataInstallerd.app/Contents/MacOS/SpeechDataInstallerd
                  /System/Library/PrivateFrameworks/SpeechObjects.framework/Versions/A/SpeechDataInstallerd.app/Contents/MacOS/SpeechDataInstallerd
                  1⤵
                    PID:468
                  • /System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/Library/LaunchServices/seedusaged
                    "/System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/Library/LaunchServices/seedusaged"
                    1⤵
                      PID:481
                    • /System/Library/CoreServices/loginwindow.app/Contents/Resources/LWWeeklyMessageTracer
                      /System/Library/CoreServices/loginwindow.app/Contents/Resources/LWWeeklyMessageTracer
                      1⤵
                        PID:474
                      • /bin/launchctl
                        /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
                        1⤵
                          PID:521
                        • /bin/launchctl
                          /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
                          1⤵
                            PID:522
                          • /usr/libexec/xpcproxy
                            xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
                            1⤵
                              PID:523
                            • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                              /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                              1⤵
                                PID:523

                              Network

                              • flag-us
                                DNS
                                35-courier.push.apple.com
                                Remote address:
                                8.8.8.8:53
                                Request
                                35-courier.push.apple.com
                                IN A
                                Response
                                35-courier.push.apple.com
                                IN CNAME
                                35.courier-push-apple.com.akadns.net
                                35.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.8
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.11
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.9
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.12
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.13
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.10
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.7
                              • flag-us
                                DNS
                                13.courier-push-apple.com.akadns.net
                                Remote address:
                                8.8.8.8:53
                                Request
                                13.courier-push-apple.com.akadns.net
                                IN A
                                Response
                                13.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.10
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.11
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.13
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.12
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.9
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.8
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.7
                              • flag-us
                                DNS
                                10.courier-push-apple.com.akadns.net
                                Remote address:
                                8.8.8.8:53
                                Request
                                10.courier-push-apple.com.akadns.net
                                IN A
                                Response
                                10.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.152
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.153
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.148
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.151
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.155
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.150
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.154
                              • flag-us
                                DNS
                                11-courier.push.apple.com
                                Remote address:
                                8.8.8.8:53
                                Request
                                11-courier.push.apple.com
                                IN A
                                Response
                                11-courier.push.apple.com
                                IN CNAME
                                11.courier-push-apple.com.akadns.net
                                11.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.151
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.148
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.153
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.150
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.154
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.152
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.155
                              • flag-us
                                DNS
                                8.courier-push-apple.com.akadns.net
                                Remote address:
                                8.8.8.8:53
                                Request
                                8.courier-push-apple.com.akadns.net
                                IN A
                                Response
                                8.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.152
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.150
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.148
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.155
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.154
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.153
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.151
                              • flag-us
                                DNS
                                cds.apple.com
                                Remote address:
                                8.8.8.8:53
                                Request
                                cds.apple.com
                                IN A
                                Response
                                cds.apple.com
                                IN CNAME
                                cds-cdn.v.aaplimg.com
                                cds-cdn.v.aaplimg.com
                                IN CNAME
                                cds.apple.com.akadns.net
                                cds.apple.com.akadns.net
                                IN CNAME
                                cds.apple.com.edgekey.net
                                cds.apple.com.edgekey.net
                                IN CNAME
                                e14768.dscb.akamaiedge.net
                                e14768.dscb.akamaiedge.net
                                IN A
                                104.103.245.125
                              • flag-gb
                                GET
                                http://ocsp.apple.com/ocsp03-apsrsaca11g1/MFYwVKADAgEAME0wSzBJMAkGBSsOAwIaBQAEFK2rIf4cXfO50li4D4I209Ic4w84BBRQArgTLBWD0UHDEYqLQjsBI0OpVgIQEYPz5D0GDx%2BPyz8PONYPuQ%3D%3D
                                Remote address:
                                17.253.77.201:80
                                Request
                                GET /ocsp03-apsrsaca11g1/MFYwVKADAgEAME0wSzBJMAkGBSsOAwIaBQAEFK2rIf4cXfO50li4D4I209Ic4w84BBRQArgTLBWD0UHDEYqLQjsBI0OpVgIQEYPz5D0GDx%2BPyz8PONYPuQ%3D%3D HTTP/1.1
                                Host: ocsp.apple.com
                                Accept: */*
                                Accept-Language: en-us
                                Connection: keep-alive
                                Accept-Encoding: gzip, deflate
                                User-Agent: com.apple.trustd/2.0
                                Response
                                HTTP/1.1 200 OK
                                Server: Apple
                                Date: Sat, 03 Aug 2024 10:49:46 GMT
                                Content-Type: application/ocsp-response
                                Content-Length: 1476
                                Expires: Sat, 03 Aug 2024 18:49:46 GMT
                                ETag: "e66672d66221abdbdfdba5ada65b284b1aca307c"
                                Last-Modified: Sat, 03 Aug 2024 10:49:46 GMT
                                Age: 9463
                                Via: http/1.1 uklon5-vp-vst-013.ts.apple.com (acdn/252.14441), http/1.1 uklon5-vp-vfe-007.ts.apple.com (acdn/252.14441), http/1.1 gbmnc1-edge-lx-010.ts.apple.com (acdn/252.14441), http/1.1 gbmnc1-edge-bx-003.ts.apple.com (acdn/252.14441)
                                X-Cache: hit-stale, hit-stale, hit-fresh, hit-fresh
                                CDNUUID: 87df0e07-fd8e-45ad-ac4f-a7c10baf8a49-30519402098
                                Connection: keep-alive
                              • flag-us
                                DNS
                                help.apple.com
                                Remote address:
                                8.8.8.8:53
                                Request
                                help.apple.com
                                IN A
                                Response
                                help.apple.com
                                IN CNAME
                                help.origin-apple.com.akadns.net
                                help.origin-apple.com.akadns.net
                                IN CNAME
                                help-ar.apple.com.edgekey.net
                                help-ar.apple.com.edgekey.net
                                IN CNAME
                                e11408.d.akamaiedge.net
                                e11408.d.akamaiedge.net
                                IN A
                                95.100.245.89
                              • flag-us
                                DNS
                                26-courier.push.apple.com
                                Remote address:
                                8.8.8.8:53
                                Request
                                26-courier.push.apple.com
                                IN A
                                Response
                                26-courier.push.apple.com
                                IN CNAME
                                26.courier-push-apple.com.akadns.net
                                26.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.154
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.150
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.155
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.153
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.151
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.148
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.152
                              • flag-us
                                DNS
                                19-courier.push.apple.com
                                Remote address:
                                8.8.8.8:53
                                Request
                                19-courier.push.apple.com
                                IN A
                                Response
                                19-courier.push.apple.com
                                IN CNAME
                                19.courier-push-apple.com.akadns.net
                                19.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.152
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.155
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.154
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.148
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.151
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.153
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.150
                              • flag-us
                                DNS
                                37.courier-push-apple.com.akadns.net
                                Remote address:
                                8.8.8.8:53
                                Request
                                37.courier-push-apple.com.akadns.net
                                IN A
                                Response
                                37.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.150
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.151
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.155
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.154
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.152
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.153
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.148
                              • flag-us
                                DNS
                                7-courier.push.apple.com
                                Remote address:
                                8.8.8.8:53
                                Request
                                7-courier.push.apple.com
                                IN A
                                Response
                                7-courier.push.apple.com
                                IN CNAME
                                7.courier-push-apple.com.akadns.net
                                7.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.11
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.12
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.9
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.8
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.10
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.7
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.13
                              • flag-us
                                DNS
                                29-courier.push.apple.com
                                Remote address:
                                8.8.8.8:53
                                Request
                                29-courier.push.apple.com
                                IN A
                                Response
                                29-courier.push.apple.com
                                IN CNAME
                                29.courier-push-apple.com.akadns.net
                                29.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.154
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.153
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.148
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.155
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.152
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.151
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.150
                              • flag-us
                                DNS
                                49.courier-push-apple.com.akadns.net
                                Remote address:
                                8.8.8.8:53
                                Request
                                49.courier-push-apple.com.akadns.net
                                IN A
                                Response
                                49.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.155
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.151
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.150
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.152
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.154
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.148
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.153
                              • flag-us
                                DNS
                                32.courier-push-apple.com.akadns.net
                                Remote address:
                                8.8.8.8:53
                                Request
                                32.courier-push-apple.com.akadns.net
                                IN A
                                Response
                                32.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.151
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.153
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.148
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.155
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.152
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.150
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.154
                              • flag-us
                                DNS
                                17.courier-push-apple.com.akadns.net
                                Remote address:
                                8.8.8.8:53
                                Request
                                17.courier-push-apple.com.akadns.net
                                IN A
                                Response
                                17.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.8
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.10
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.12
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.7
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.13
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.9
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.11
                              • flag-us
                                DNS
                                30.courier-push-apple.com.akadns.net
                                Remote address:
                                8.8.8.8:53
                                Request
                                30.courier-push-apple.com.akadns.net
                                IN A
                                Response
                                30.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.150
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.153
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.152
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.154
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.148
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.151
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.155
                              • flag-us
                                DNS
                                6-courier.push.apple.com
                                Remote address:
                                8.8.8.8:53
                                Request
                                6-courier.push.apple.com
                                IN A
                                Response
                                6-courier.push.apple.com
                                IN CNAME
                                6.courier-push-apple.com.akadns.net
                                6.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.7
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.11
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.12
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.8
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.10
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.9
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.13
                              • flag-us
                                DNS
                                0-courier.push.apple.com
                                Remote address:
                                8.8.8.8:53
                                Request
                                0-courier.push.apple.com
                                IN A
                                Response
                                0-courier.push.apple.com
                                IN CNAME
                                0.courier-push-apple.com.akadns.net
                                0.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.154
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.151
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.155
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.148
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.150
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.153
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.152
                              • flag-us
                                DNS
                                37.courier-push-apple.com.akadns.net
                                Remote address:
                                8.8.8.8:53
                                Request
                                37.courier-push-apple.com.akadns.net
                                IN A
                                Response
                                37.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.152
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.150
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.148
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.154
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.153
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.151
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.155
                              • flag-us
                                DNS
                                34.courier-push-apple.com.akadns.net
                                Remote address:
                                8.8.8.8:53
                                Request
                                34.courier-push-apple.com.akadns.net
                                IN A
                                Response
                                34.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.11
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.13
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.7
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.8
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.9
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.10
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.12
                              • flag-us
                                DNS
                                11.courier-push-apple.com.akadns.net
                                Remote address:
                                8.8.8.8:53
                                Request
                                11.courier-push-apple.com.akadns.net
                                IN A
                                Response
                                11.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.12
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.13
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.8
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.7
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.9
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.11
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.10
                              • flag-us
                                DNS
                                1.courier-push-apple.com.akadns.net
                                Remote address:
                                8.8.8.8:53
                                Request
                                1.courier-push-apple.com.akadns.net
                                IN A
                                Response
                                1.courier-push-apple.com.akadns.net
                                IN CNAME
                                gb-courier-4.push-apple.com.akadns.net
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.154
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.153
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.148
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.155
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.152
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.150
                                gb-courier-4.push-apple.com.akadns.net
                                IN A
                                17.57.146.151
                              • 17.250.81.67:443
                                tls, https
                                128 B
                                40 B
                                2
                                1
                              • 104.103.245.125:443
                                cds.apple.com
                                tls
                                18.7kB
                                165.0kB
                                212
                                201
                              • 17.253.77.201:80
                                http://ocsp.apple.com/ocsp03-apsrsaca11g1/MFYwVKADAgEAME0wSzBJMAkGBSsOAwIaBQAEFK2rIf4cXfO50li4D4I209Ic4w84BBRQArgTLBWD0UHDEYqLQjsBI0OpVgIQEYPz5D0GDx%2BPyz8PONYPuQ%3D%3D
                                http
                                637 B
                                2.4kB
                                6
                                5

                                HTTP Request

                                GET http://ocsp.apple.com/ocsp03-apsrsaca11g1/MFYwVKADAgEAME0wSzBJMAkGBSsOAwIaBQAEFK2rIf4cXfO50li4D4I209Ic4w84BBRQArgTLBWD0UHDEYqLQjsBI0OpVgIQEYPz5D0GDx%2BPyz8PONYPuQ%3D%3D

                                HTTP Response

                                200
                              • 95.100.245.89:443
                                help.apple.com
                                tls
                                29.6kB
                                111.9kB
                                164
                                131
                              • 95.100.245.89:443
                                help.apple.com
                                tls
                                1.8kB
                                8.0kB
                                16
                                14
                              • 8.8.8.8:53
                                35-courier.push.apple.com
                                dns
                                71 B
                                271 B
                                1
                                1

                                DNS Request

                                35-courier.push.apple.com

                                DNS Response

                                17.57.146.8
                                17.57.146.11
                                17.57.146.9
                                17.57.146.12
                                17.57.146.13
                                17.57.146.10
                                17.57.146.7

                              • 8.8.8.8:53
                                13.courier-push-apple.com.akadns.net
                                dns
                                82 B
                                232 B
                                1
                                1

                                DNS Request

                                13.courier-push-apple.com.akadns.net

                                DNS Response

                                17.57.146.10
                                17.57.146.11
                                17.57.146.13
                                17.57.146.12
                                17.57.146.9
                                17.57.146.8
                                17.57.146.7

                              • 8.8.8.8:53
                                10.courier-push-apple.com.akadns.net
                                dns
                                82 B
                                232 B
                                1
                                1

                                DNS Request

                                10.courier-push-apple.com.akadns.net

                                DNS Response

                                17.57.146.152
                                17.57.146.153
                                17.57.146.148
                                17.57.146.151
                                17.57.146.155
                                17.57.146.150
                                17.57.146.154

                              • 8.8.8.8:53
                                11-courier.push.apple.com
                                dns
                                71 B
                                271 B
                                1
                                1

                                DNS Request

                                11-courier.push.apple.com

                                DNS Response

                                17.57.146.151
                                17.57.146.148
                                17.57.146.153
                                17.57.146.150
                                17.57.146.154
                                17.57.146.152
                                17.57.146.155

                              • 8.8.8.8:53
                                8.courier-push-apple.com.akadns.net
                                dns
                                81 B
                                231 B
                                1
                                1

                                DNS Request

                                8.courier-push-apple.com.akadns.net

                                DNS Response

                                17.57.146.152
                                17.57.146.150
                                17.57.146.148
                                17.57.146.155
                                17.57.146.154
                                17.57.146.153
                                17.57.146.151

                              • 8.8.8.8:53
                                cds.apple.com
                                dns
                                59 B
                                218 B
                                1
                                1

                                DNS Request

                                cds.apple.com

                                DNS Response

                                104.103.245.125

                              • 8.8.8.8:53
                                help.apple.com
                                dns
                                60 B
                                196 B
                                1
                                1

                                DNS Request

                                help.apple.com

                                DNS Response

                                95.100.245.89

                              • 8.8.8.8:53
                                26-courier.push.apple.com
                                dns
                                71 B
                                271 B
                                1
                                1

                                DNS Request

                                26-courier.push.apple.com

                                DNS Response

                                17.57.146.154
                                17.57.146.150
                                17.57.146.155
                                17.57.146.153
                                17.57.146.151
                                17.57.146.148
                                17.57.146.152

                              • 8.8.8.8:53
                                19-courier.push.apple.com
                                dns
                                71 B
                                271 B
                                1
                                1

                                DNS Request

                                19-courier.push.apple.com

                                DNS Response

                                17.57.146.152
                                17.57.146.155
                                17.57.146.154
                                17.57.146.148
                                17.57.146.151
                                17.57.146.153
                                17.57.146.150

                              • 8.8.8.8:53
                                37.courier-push-apple.com.akadns.net
                                dns
                                82 B
                                232 B
                                1
                                1

                                DNS Request

                                37.courier-push-apple.com.akadns.net

                                DNS Response

                                17.57.146.150
                                17.57.146.151
                                17.57.146.155
                                17.57.146.154
                                17.57.146.152
                                17.57.146.153
                                17.57.146.148

                              • 8.8.8.8:53
                                7-courier.push.apple.com
                                dns
                                70 B
                                269 B
                                1
                                1

                                DNS Request

                                7-courier.push.apple.com

                                DNS Response

                                17.57.146.11
                                17.57.146.12
                                17.57.146.9
                                17.57.146.8
                                17.57.146.10
                                17.57.146.7
                                17.57.146.13

                              • 8.8.8.8:53
                                29-courier.push.apple.com
                                dns
                                71 B
                                271 B
                                1
                                1

                                DNS Request

                                29-courier.push.apple.com

                                DNS Response

                                17.57.146.154
                                17.57.146.153
                                17.57.146.148
                                17.57.146.155
                                17.57.146.152
                                17.57.146.151
                                17.57.146.150

                              • 8.8.8.8:53
                                49.courier-push-apple.com.akadns.net
                                dns
                                82 B
                                232 B
                                1
                                1

                                DNS Request

                                49.courier-push-apple.com.akadns.net

                                DNS Response

                                17.57.146.155
                                17.57.146.151
                                17.57.146.150
                                17.57.146.152
                                17.57.146.154
                                17.57.146.148
                                17.57.146.153

                              • 8.8.8.8:53
                                32.courier-push-apple.com.akadns.net
                                dns
                                82 B
                                232 B
                                1
                                1

                                DNS Request

                                32.courier-push-apple.com.akadns.net

                                DNS Response

                                17.57.146.151
                                17.57.146.153
                                17.57.146.148
                                17.57.146.155
                                17.57.146.152
                                17.57.146.150
                                17.57.146.154

                              • 8.8.8.8:53
                                17.courier-push-apple.com.akadns.net
                                dns
                                82 B
                                232 B
                                1
                                1

                                DNS Request

                                17.courier-push-apple.com.akadns.net

                                DNS Response

                                17.57.146.8
                                17.57.146.10
                                17.57.146.12
                                17.57.146.7
                                17.57.146.13
                                17.57.146.9
                                17.57.146.11

                              • 8.8.8.8:53
                                30.courier-push-apple.com.akadns.net
                                dns
                                82 B
                                232 B
                                1
                                1

                                DNS Request

                                30.courier-push-apple.com.akadns.net

                                DNS Response

                                17.57.146.150
                                17.57.146.153
                                17.57.146.152
                                17.57.146.154
                                17.57.146.148
                                17.57.146.151
                                17.57.146.155

                              • 8.8.8.8:53
                                6-courier.push.apple.com
                                dns
                                70 B
                                269 B
                                1
                                1

                                DNS Request

                                6-courier.push.apple.com

                                DNS Response

                                17.57.146.7
                                17.57.146.11
                                17.57.146.12
                                17.57.146.8
                                17.57.146.10
                                17.57.146.9
                                17.57.146.13

                              • 8.8.8.8:53
                                0-courier.push.apple.com
                                dns
                                70 B
                                269 B
                                1
                                1

                                DNS Request

                                0-courier.push.apple.com

                                DNS Response

                                17.57.146.154
                                17.57.146.151
                                17.57.146.155
                                17.57.146.148
                                17.57.146.150
                                17.57.146.153
                                17.57.146.152

                              • 224.0.0.251:5353
                                332 B
                                1
                              • 8.8.8.8:53
                                37.courier-push-apple.com.akadns.net
                                dns
                                82 B
                                232 B
                                1
                                1

                                DNS Request

                                37.courier-push-apple.com.akadns.net

                                DNS Response

                                17.57.146.152
                                17.57.146.150
                                17.57.146.148
                                17.57.146.154
                                17.57.146.153
                                17.57.146.151
                                17.57.146.155

                              • 8.8.8.8:53
                                34.courier-push-apple.com.akadns.net
                                dns
                                82 B
                                232 B
                                1
                                1

                                DNS Request

                                34.courier-push-apple.com.akadns.net

                                DNS Response

                                17.57.146.11
                                17.57.146.13
                                17.57.146.7
                                17.57.146.8
                                17.57.146.9
                                17.57.146.10
                                17.57.146.12

                              • 8.8.8.8:53
                                11.courier-push-apple.com.akadns.net
                                dns
                                82 B
                                232 B
                                1
                                1

                                DNS Request

                                11.courier-push-apple.com.akadns.net

                                DNS Response

                                17.57.146.12
                                17.57.146.13
                                17.57.146.8
                                17.57.146.7
                                17.57.146.9
                                17.57.146.11
                                17.57.146.10

                              • 8.8.8.8:53
                                1.courier-push-apple.com.akadns.net
                                dns
                                81 B
                                231 B
                                1
                                1

                                DNS Request

                                1.courier-push-apple.com.akadns.net

                                DNS Response

                                17.57.146.154
                                17.57.146.153
                                17.57.146.148
                                17.57.146.155
                                17.57.146.152
                                17.57.146.150
                                17.57.146.151

                              MITRE ATT&CK Enterprise v15

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              We care about your privacy.

                              This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.