Overview
overview
4Static
static
3Natro Macr...re.dll
macos-10.15-amd64
4Natro Macr...fe.dll
macos-10.15-amd64
1Natro Macr...er.dll
macos-10.15-amd64
1Natro Macr...ed.dll
macos-10.15-amd64
1Natro Macr...re.dll
macos-10.15-amd64
1Natro Macr...mo.dll
macos-10.15-amd64
1Natro Macr...ta.dll
macos-10.15-amd64
1Natro Macr...ay.dll
macos-10.15-amd64
1Natro Macr...na.dll
macos-10.15-amd64
1Natro Macr...ce.dll
macos-10.15-amd64
1Natro Macr...ts.dll
macos-10.15-amd64
1Natro Macr...us.dll
macos-10.15-amd64
1Natro Macr...n3.dll
macos-10.15-amd64
1Natro Macr...al.dll
macos-10.15-amd64
1Natro Macr...eo.dll
macos-10.15-amd64
1Natro Macr...NK.dll
macos-10.15-amd64
1Natro Macr...er.dll
macos-10.15-amd64
1Natro Macr...GV.dll
macos-10.15-amd64
1Natro Macr...se.dll
macos-10.15-amd64
1Natro Macr...AS.dll
macos-10.15-amd64
1Natro Macr...x3.dll
macos-10.15-amd64
1Natro Macr...mp.dll
macos-10.15-amd64
1Natro Macr...in.dll
macos-10.15-amd64
1Natro Macr...S7.dll
macos-10.15-amd64
1Natro Macr...ay.dll
macos-10.15-amd64
1Natro Macr...rk.dll
macos-10.15-amd64
1Natro Macr...32.exe
macos-10.15-amd64
1Natro Macr...64.exe
macos-10.15-amd64
1Natro Macr...or.vbs
macos-10.15-amd64
1Natro Macr...us.ps1
macos-10.15-amd64
1Natro Macr...und.js
macos-10.15-amd64
1Natro Macr...ro.vbs
macos-10.15-amd64
1Analysis
-
max time kernel
94s -
max time network
126s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
01-09-2024 14:08
Static task
static1
Behavioral task
behavioral1
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Allure.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral2
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Ayofe.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral3
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/BluePaper.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral4
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Concaved.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral5
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Core.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral6
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Cosmo.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral7
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Fanta.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral8
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Graygray.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral9
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Hana.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral10
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Invoice.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral11
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Lakrits.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral12
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Luminous.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral13
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/MacLion3.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral14
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Minimal.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral15
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Museo.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral16
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/PINK.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral17
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Panther.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral18
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/PaperAGV.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral19
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Relapse.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral20
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/SNAS.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral21
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Simplex3.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral22
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Stomp.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral23
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/USkin.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral24
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/VS7.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral25
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/WhiteGray.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral26
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Woodwork.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral27
Sample
Natro Macro v1.0.0.2/submacros/AutoHotkey32.exe
Resource
macos-20240711.1-en
Behavioral task
behavioral28
Sample
Natro Macro v1.0.0.2/submacros/AutoHotkey64.exe
Resource
macos-20240711.1-en
Behavioral task
behavioral29
Sample
Natro Macro v1.0.0.2/submacros/StatMonitor.vbs
Resource
macos-20240711.1-en
Behavioral task
behavioral30
Sample
Natro Macro v1.0.0.2/submacros/Status.ps1
Resource
macos-20240711.1-en
Behavioral task
behavioral31
Sample
Natro Macro v1.0.0.2/submacros/background.js
Resource
macos-20240711.1-en
Behavioral task
behavioral32
Sample
Natro Macro v1.0.0.2/submacros/natro_macro.vbs
Resource
macos-20240711.1-en
General
-
Target
Natro Macro v1.0.0.2/nm_image_assets/Styles/Stomp.dll
-
Size
1.9MB
-
MD5
818a95e2376bbdc68e195c5ecf841964
-
SHA1
ad2c67ec7538454aa03ac613895e8d635772d39f
-
SHA256
3afc92844ab5ecc73d1db4e277c5c920fcc97f5135fbdaeee41853d9c238b2ef
-
SHA512
c8d3c10ba3f194c3c083b2ccbb17fce7b7c72d3bc5cb76a0f531658942d0ca1b37e87fe4d9a5cb0c12b8c3763045740f34bb896aa4653b662e0b2ec32a63ef21
-
SSDEEP
12288:TFbO7NMM9n5OrHss1FbO7NMMdn5OrHss9FbO7NMMtn5OrHssBJOhT6J/HQ:il
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Natro Macro v1.0.0.2/nm_image_assets/Styles/Stomp.dll\""1⤵PID:492
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Natro Macro v1.0.0.2/nm_image_assets/Styles/Stomp.dll\""1⤵PID:492
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Natro Macro v1.0.0.2/nm_image_assets/Styles/Stomp.dll"1⤵PID:492
-
/bin/zsh/bin/zsh -c "/Users/run/Natro Macro v1.0.0.2/nm_image_assets/Styles/Stomp.dll"2⤵PID:493
-
-
/Users/run/Natro/Users/run/Natro Macro v1.0.0.2/nm_image_assets/Styles/Stomp.dll2⤵PID:493
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:539
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:539
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:543
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:544