Overview

overview

1

Static

static

1

4e3464a13b...77.zip

macos-10.15-amd64

1

Payload/Tr...2x.png

macos-10.15-amd64

1

Payload/Tr...ad.png

macos-10.15-amd64

1

Payload/Tr...ts.car

macos-10.15-amd64

1

Payload/Tr....dylib

macos-10.15-amd64

1

Payload/Tr....plist

macos-10.15-amd64

1

Payload/Tr...kgInfo

macos-10.15-amd64

1

Payload/Tr...allerX

macos-10.15-amd64

1

Payload/Tr...ore.gz

macos-10.15-amd64

1

TrollStore.tar

macos-10.15-amd64

1

TrollStore...29.jpg

macos-10.15-amd64

1

TrollStore...2x.jpg

macos-10.15-amd64

1

TrollStore...3x.jpg

macos-10.15-amd64

1

TrollStore...40.jpg

macos-10.15-amd64

1

TrollStore...2x.jpg

macos-10.15-amd64

1

TrollStore...3x.jpg

macos-10.15-amd64

1

TrollStore...50.jpg

macos-10.15-amd64

1

TrollStore...2x.jpg

macos-10.15-amd64

1

TrollStore...57.jpg

macos-10.15-amd64

1

TrollStore...2x.jpg

macos-10.15-amd64

1

TrollStore...3x.png

macos-10.15-amd64

1

TrollStore...60.jpg

macos-10.15-amd64

1

TrollStore...2x.jpg

macos-10.15-amd64

1

TrollStore...3x.jpg

macos-10.15-amd64

1

TrollStore...72.jpg

macos-10.15-amd64

1

TrollStore...2x.jpg

macos-10.15-amd64

1

TrollStore...Helper

macos-10.15-amd64

1

TrollStore...lStore

macos-10.15-amd64

1

TrollStore...helper

macos-10.15-amd64

1

Payload/Tr...es.xml

macos-10.15-amd64

1

Payload/Tr....dylib

macos-10.15-amd64

1

Analysis

  • max time kernel
    56s
  • max time network
    63s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    18/08/2024, 10:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Payload/TrollInstallerX.app/Assets.car

  • Size

    1.6MB

  • MD5

    55273cd1a2cd30bda98877a6635b735c

  • SHA1

    ebc3cdfaf9d5882e8ecf773ac4af995b7a485802

  • SHA256

    950f5a580d15adb3a21f49b9ce897d026387fb66c54d587d719572b0fb7b0b81

  • SHA512

    d3b56e9bdaebe009b914e79909815fd9a86ad6c939a7332368509ffcc67fe0a0d4793e761cd654a84f66bc505841fd1efd4ba0271bc38c4404cc4396e6c10575

  • SSDEEP

    49152:QjZwRhPmz5v2z7hUIE0dz5jZwRhPmz5v2z7hU:EE4R26IEYZE4R26

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Payload/TrollInstallerX.app/Assets.car\""
    1⤵
      PID:488
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Payload/TrollInstallerX.app/Assets.car\""
      1⤵
        PID:488
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/Payload/TrollInstallerX.app/Assets.car
        1⤵
          PID:488
          • /bin/zsh
            /bin/zsh -c /Users/run/Payload/TrollInstallerX.app/Assets.car
            2⤵
              PID:489
            • /Users/run/Payload/TrollInstallerX.app/Assets.car
              /Users/run/Payload/TrollInstallerX.app/Assets.car
              2⤵
                PID:489
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
              1⤵
                PID:528
              • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                1⤵
                  PID:528

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads