Analysis

  • max time kernel
    0s
  • max time network
    4s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    18/08/2024, 10:55

General

  • Target

    Payload/TrollInstallerX.app/libxpf.dylib

  • Size

    364KB

  • MD5

    7d334932c43bb53818587a8831e4887d

  • SHA1

    ae890a66ee6a45d0d261b2b74448de3620811cac

  • SHA256

    035b0762c708688e6dfb2229f67574aea25f8dc5f69ae68a29fd586850df41db

  • SHA512

    b862b378380805d07be4910717a2804b213d0939f75b562133a5262810e552afeeb81fbe3e913a2c45d406ac0763fbbf59fe64ecfdc35e61186bdb0e0fd47745

  • SSDEEP

    3072:NTKzWMM/tA3g+WriHliIqRf7D98XgrQcaoq4DMvoo7wsf7:NGzWMMmqRf7h8X4akOwsf7

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Payload/TrollInstallerX.app/libxpf.dylib\""
    1⤵
      PID:490
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Payload/TrollInstallerX.app/libxpf.dylib\""
      1⤵
        PID:490

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads