30df01c4b375ba65307f610881a74b4bebef733b4c1819545ef089231eacdac8 | Triage

Submit
Reports

Overview

overview

3

Static

static

3

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...UI.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...le.dll

macos-10.15-amd64

1

Start Surv...ne.dll

macos-10.15-amd64

1

Start Surv...ib.dll

macos-10.15-amd64

1

UnityCrash...32.exe

macos-10.15-amd64

1

UnityCrash...64.exe

macos-10.15-amd64

1

UnityPlayer.dll

macos-10.15-amd64

1

Resubmissions

11/08/2024, 03:09

240811-dnmdjswflb 3

Analysis

max time kernel
104s
max time network
157s
platform
macos-10.15_amd64
resource
macos-20240711.1-en
resource tags

arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
11/08/2024, 03:09

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Start Survey_Data/Managed/UnityEngine.PhysicsModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Start Survey_Data/Managed/UnityEngine.ProfilerModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Start Survey_Data/Managed/UnityEngine.ScreenCaptureModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Start Survey_Data/Managed/UnityEngine.SharedInternalsModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Start Survey_Data/Managed/UnityEngine.SpriteMaskModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Start Survey_Data/Managed/UnityEngine.SpriteShapeModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Start Survey_Data/Managed/UnityEngine.StreamingModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Start Survey_Data/Managed/UnityEngine.SubstanceModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Start Survey_Data/Managed/UnityEngine.TLSModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Start Survey_Data/Managed/UnityEngine.TerrainModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Start Survey_Data/Managed/UnityEngine.TerrainPhysicsModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Start Survey_Data/Managed/UnityEngine.TextCoreModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Start Survey_Data/Managed/UnityEngine.TextRenderingModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Start Survey_Data/Managed/UnityEngine.TilemapModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Start Survey_Data/Managed/UnityEngine.UI.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Start Survey_Data/Managed/UnityEngine.UnityTestProtocolModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Start Survey_Data/Managed/UnityEngine.UnityWebRequestAssetBundleModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Start Survey_Data/Managed/UnityEngine.UnityWebRequestAudioModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Start Survey_Data/Managed/UnityEngine.UnityWebRequestModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Start Survey_Data/Managed/UnityEngine.UnityWebRequestTextureModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Start Survey_Data/Managed/UnityEngine.UnityWebRequestWWWModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Start Survey_Data/Managed/UnityEngine.VFXModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Start Survey_Data/Managed/UnityEngine.VRModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Start Survey_Data/Managed/UnityEngine.VehiclesModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Start Survey_Data/Managed/UnityEngine.VideoModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Start Survey_Data/Managed/UnityEngine.WindModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Start Survey_Data/Managed/UnityEngine.XRModule.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Start Survey_Data/Managed/UnityEngine.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Start Survey_Data/Managed/mscorlib.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

UnityCrashHandler32.exe

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

UnityCrashHandler64.exe

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

UnityPlayer.dll

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Start Survey_Data/Managed/mscorlib.dll
Size

3.6MB
MD5

81b61eecc257524edef2295819a7de96
SHA1

16ab2797075ba0d1d636c09f8a1a15a7e9211ce9
SHA256

f542bf7e947effae018d0107d366621d0d792545908bd1d3975d1ebef5bdb97d
SHA512

d179d87084766ffdfc85917dbdae181418d5d34889992eabcc741146b3a3f36d72e5d76a9416294f0587e2a41f6fdcbbf6a3afb203ebe76a445448c75c6ddf71
SSDEEP

49152:yndO3AM3Abg2Xf0uMkpleXktZh8Z2tjvA:2dOtAntnl

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Start Survey_Data/Managed/mscorlib.dll\""
1⤵
PID:488

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Start Survey_Data/Managed/mscorlib.dll\""
1⤵
PID:488

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Start Survey_Data/Managed/mscorlib.dll"
1⤵
PID:488
- /bin/zsh
  /bin/zsh -c "/Users/run/Start Survey_Data/Managed/mscorlib.dll"
  2⤵
  PID:489
- /Users/run/Start
  /Users/run/Start Survey_Data/Managed/mscorlib.dll
  2⤵
  PID:489

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:527

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:527

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:532

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:533

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy