Analysis
-
max time kernel
28s -
max time network
27s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
08-08-2024 14:53
Behavioral task
behavioral1
Sample
FridayBoycrazyV2.exe
Resource
macos-20240711.1-en
macos-10.15-amd64
0 signatures
150 seconds
General
-
Target
FridayBoycrazyV2.exe
-
Size
280KB
-
MD5
41e34a8240026b4e9cd8d81a73ee8b2c
-
SHA1
3876b12e152dd552a7059538242b6f87a23e60f5
-
SHA256
0ef2768bdfaa0b953a5c498f18bbf2df5dce249eaf2044474c476c4367c535b5
-
SHA512
a7d610ee4f116121757f47193bf092b639cf2d439dcfa364ea800c28c0f21996fd8baa31c9abe68d2c18cc8f334c57f9d71c4e444a04a27d3b9cab90eecbba73
-
SSDEEP
6144:1r93iyJ7/+WZT1kRnSeXSX9MNzxiMwP2OswK:iyJ7/+Wd1kRnFX4mNzxyeOswK
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/FridayBoycrazyV2.exe\""1⤵PID:485
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/FridayBoycrazyV2.exe\""1⤵PID:485
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/FridayBoycrazyV2.exe1⤵PID:485
-
/bin/zsh/bin/zsh -c /Users/run/FridayBoycrazyV2.exe2⤵PID:487
-
-
/Users/run/FridayBoycrazyV2.exe/Users/run/FridayBoycrazyV2.exe2⤵PID:487
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:512
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:512