Analysis
-
max time kernel
635s -
max time network
1806s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
11/08/2024, 13:23
Static task
static1
Behavioral task
behavioral1
Sample
ChatGPT_Desktop_public_latest.dmg
Resource
macos-20240711.1-en
Behavioral task
behavioral2
Sample
ChatGPT Installer/ChatGPT.app/Contents/MacOS/ChatGPT
Resource
macos-20240711.1-en
Behavioral task
behavioral3
Sample
ChatGPT Installer/ChatGPT.app/Contents/Resources/Highlightr_Highlightr.bundle/Contents/Resources/highlight.min.js
Resource
macos-20240711.1-en
Behavioral task
behavioral4
Sample
ChatGPT Installer/ChatGPT.app/Contents/Resources/iosMath_iosMath.bundle/Contents/Resources/math_table_to_plist.py
Resource
macos-20240711.1-en
General
-
Target
ChatGPT Installer/ChatGPT.app/Contents/MacOS/ChatGPT
-
Size
250KB
-
MD5
9d62ba096b78be7b35f39ce6cc826bea
-
SHA1
2970e595f83ac353def96293160dbf38ce0a5cc3
-
SHA256
aa31aeff9e838ede32b5383542095f9577a47a4434592d379bbfee21b7e617d7
-
SHA512
de4f73c38243bbe61caef51306741515624245873f643b58bfca5b96f40cd0f3c9baf1c48993bb33f870063a04376098c210c3b3e093bf319dab2da4894fa590
-
SSDEEP
6144:grORvMwbigm96vDlVfpvgV8OHvey0lcWzvmh:gAdmx96vDN
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/ChatGPT Installer/ChatGPT.app/Contents/MacOS/ChatGPT\""1⤵PID:500
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/ChatGPT Installer/ChatGPT.app/Contents/MacOS/ChatGPT\""1⤵PID:500
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/ChatGPT Installer/ChatGPT.app/Contents/MacOS/ChatGPT"1⤵PID:500
-
/bin/zsh/bin/zsh -c "/Users/run/ChatGPT Installer/ChatGPT.app/Contents/MacOS/ChatGPT"2⤵PID:501
-
-
/Users/run/ChatGPT/Users/run/ChatGPT Installer/ChatGPT.app/Contents/MacOS/ChatGPT2⤵PID:501
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.newsyslog1⤵PID:531
-
/usr/sbin/newsyslog/usr/sbin/newsyslog1⤵PID:531
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:532
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:532
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:533
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:533