Analysis
-
max time kernel
779s -
max time network
1801s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
01-09-2024 02:10
Static task
static1
Behavioral task
behavioral1
Sample
Screenshot 2024-08-31 6.44.38 PM.png
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Screenshot 2024-08-31 6.44.38 PM.png
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Screenshot 2024-08-31 6.44.38 PM.png
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral4
Sample
Screenshot 2024-08-31 6.44.38 PM.png
Resource
android-x64-20240624-en
Behavioral task
behavioral5
Sample
Screenshot 2024-08-31 6.44.38 PM.png
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral6
Sample
Screenshot 2024-08-31 6.44.38 PM.png
Resource
macos-20240711.1-en
General
-
Target
Screenshot 2024-08-31 6.44.38 PM.png
-
Size
191KB
-
MD5
e1829b9b96082463366c714b7cba49b8
-
SHA1
6f5a52fa636d4ebd7fc422abb149b0f2dc439c57
-
SHA256
4a93e56c054cb686b46ae5575d5dafad51070fe55471d738b64a23ba15078a50
-
SHA512
58ca59cef659f0d38bbe88da4fb494db89aa8a91e3a12bc0b61a86957e96d0f996c17c3ff707a43241d9e53de9498a799227d737bf2fa2035657cc21573a58e9
-
SSDEEP
3072:Egu0SLpaDLGKmoS1/O2TA32P0RdyfNUC5y9KDsPGTXBlLDxjGEW2e3MKDcB1Uf+u:OlaIr1TTA3pRdcO3P0lvpW3MKDcnzYAk
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Screenshot 2024-08-31 6.44.38 PM.png\""1⤵PID:476
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Screenshot 2024-08-31 6.44.38 PM.png\""1⤵PID:476
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Screenshot 2024-08-31 6.44.38 PM.png"1⤵PID:476
-
/bin/zsh/bin/zsh -c "/Users/run/Screenshot 2024-08-31 6.44.38 PM.png"2⤵PID:477
-
-
/Users/run/Screenshot/Users/run/Screenshot 2024-08-31 6.44.38 PM.png2⤵PID:477
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:527
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:527
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:528
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:528
-
/usr/libexec/xpcproxyxpcproxy com.apple.newsyslog1⤵PID:530
-
/usr/sbin/newsyslog/usr/sbin/newsyslog1⤵PID:530