d62a9622a4e0272e53a91becf333de3fd158fe823c4c9c8896059ef6f9d77cdd | Triage

Analysis

max time kernel
1s
max time network
6s
platform
macos-10.15_amd64
resource
macos-20240711.1-en
resource tags

arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
18/08/2024, 10:55

Sharing

Report Analysis Logs

General

Target

TrollStore.app/[email protected]
Size

12KB
MD5

425c8c4f6370a1e71f04257cc079079c
SHA1

608ef760e2de6534a1290e231e5152a795a8b104
SHA256

e02c12b92dfd40dd8a4aad553335f00f3a61ab65dc0003dfe3faf20ff7c778f2
SHA512

31bca5eccb24745c22476f085c24121aabd06bdeb58745e33025d7140eb2c0c5993fd16de90eb3b7294c39c2e58cf194708606fd7d7e37da9050faa48e91949c
SSDEEP

384:5jZlBx81bTWhmmM9aBM9G5Tu1rJzbhY5IRpL:5jZlybqsmM9aR5Tu1lKIPL

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/TrollStore.app/[email protected]\""
1⤵
PID:489

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/TrollStore.app/[email protected]\""
1⤵
PID:489

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/TrollStore.app/[email protected]"
1⤵
PID:489
- /bin/zsh
  /bin/zsh -c "/Users/run/TrollStore.app/[email protected]"
  2⤵
  PID:492
- /Users/run/TrollStore.app/[email protected]
  "/Users/run/TrollStore.app/[email protected]"
  2⤵
  PID:492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads