Resubmissions
31/08/2024, 04:27
240831-e3h54swbpm 427/08/2024, 19:53
240827-ylyc9a1all 327/08/2024, 19:52
240827-ylmazs1ajn 427/08/2024, 19:51
240827-yk5e6szhpn 121/07/2024, 17:51
240721-wfjlssxepe 420/07/2024, 17:34
240720-v5q7hawejr 419/07/2024, 16:26
240719-txqqbstbqa 119/07/2024, 03:39
240719-d74f6svalf 119/07/2024, 02:46
240719-c9bcqsygpm 119/07/2024, 02:40
240719-c591hasbqc 1Analysis
-
max time kernel
22s -
max time network
22s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
27/08/2024, 19:51
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://wellhello.com/site/user/fastlogin/f1d56a765f6ce77eaae610449365b0d0/343906313?uid=289158894&r=https%3A%2F%2Fwellhello.com%2Fsite%2Fuser%2Fconfirmemail%2F289158894%2FtbwCwdVP%3Flink_name%3Dlink%26template_name%3Dconfirm_email%26mailer_version%3D3
Resource
macos-20240711.1-en
General
-
Target
https://wellhello.com/site/user/fastlogin/f1d56a765f6ce77eaae610449365b0d0/343906313?uid=289158894&r=https%3A%2F%2Fwellhello.com%2Fsite%2Fuser%2Fconfirmemail%2F289158894%2FtbwCwdVP%3Flink_name%3Dlink%26template_name%3Dconfirm_email%26mailer_version%3D3
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://wellhello.com/site/user/fastlogin/f1d56a765f6ce77eaae610449365b0d0/343906313?uid=289158894&r=https%3A%2F%2Fwellhello.com%2Fsite%2Fuser%2Fconfirmemail%2F289158894%2FtbwCwdVP%3Flink_name%3Dlink%26template_name%3Dconfirm_email%26mailer_version%3D3\""1⤵PID:483
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://wellhello.com/site/user/fastlogin/f1d56a765f6ce77eaae610449365b0d0/343906313?uid=289158894&r=https%3A%2F%2Fwellhello.com%2Fsite%2Fuser%2Fconfirmemail%2F289158894%2FtbwCwdVP%3Flink_name%3Dlink%26template_name%3Dconfirm_email%26mailer_version%3D3\""1⤵PID:483
-
/usr/bin/sudosudo /bin/zsh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://wellhello.com/site/user/fastlogin/f1d56a765f6ce77eaae610449365b0d0/343906313?uid=289158894&r=https%3A%2F%2Fwellhello.com%2Fsite%2Fuser%2Fconfirmemail%2F289158894%2FtbwCwdVP%3Flink_name%3Dlink%26template_name%3Dconfirm_email%26mailer_version%3D3"1⤵PID:483
-
/bin/zsh/bin/zsh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://wellhello.com/site/user/fastlogin/f1d56a765f6ce77eaae610449365b0d0/343906313?uid=289158894&r=https%3A%2F%2Fwellhello.com%2Fsite%2Fuser%2Fconfirmemail%2F289158894%2FtbwCwdVP%3Flink_name%3Dlink%26template_name%3Dconfirm_email%26mailer_version%3D3"2⤵PID:485
-