Analysis

  • max time kernel
    1s
  • max time network
    6s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    18/08/2024, 10:55

General

  • Target

    TrollStore.app/TrollStore

  • Size

    271KB

  • MD5

    edabdcf28e70090bc8c5bf746b8b4fae

  • SHA1

    b6ed7b1ce3a88a42cee64c8beb4c879261cf011a

  • SHA256

    2c7cd67927a06912d42a20a4dcf99af8949bacbcd126caf40dda5f02d368c110

  • SHA512

    e3c9867d0a735ae50060b6b08a5d5e36f8636ae0c069e646b3784989671df57aa98d7bf6a5fdaf98efaf00070626bdccddd57a85a04f0f82de6b715c49a441bc

  • SSDEEP

    3072:3hAuOGx6WEUjm3Ev7P86NQaktDe6uBZspOENGGEhi1fWfvk1/zOdgSy9Yke/TcGN:6jDWESm3SjZ1H4XNGGmi1O0

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/TrollStore.app/TrollStore\""
    1⤵
      PID:490
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/TrollStore.app/TrollStore\""
      1⤵
        PID:490
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/TrollStore.app/TrollStore
        1⤵
          PID:490
          • /bin/zsh
            /bin/zsh -c /Users/run/TrollStore.app/TrollStore
            2⤵
              PID:502
            • /Users/run/TrollStore.app/TrollStore
              /Users/run/TrollStore.app/TrollStore
              2⤵
                PID:502

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads