Analysis
-
max time kernel
130s -
max time network
146s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
02/09/2024, 13:09
Static task
static1
Behavioral task
behavioral1
Sample
MacOS/libsqlite3.0.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral2
Sample
MacOS/libusbmuxd-2.0.6.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral3
Sample
MacOS/libxml2.2.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral4
Sample
MacOS/restoreipsw
Resource
macos-20240711.1-en
General
-
Target
MacOS/libxml2.2.dylib
-
Size
1.7MB
-
MD5
4f29507513b2a223a542489cab76b07c
-
SHA1
7f31c690dc7da0a9628c841c433d8da772baa792
-
SHA256
325737b9eeb4a4872071f422281101af37aabc0f611ae29ef0364f365ad51844
-
SHA512
2fe39e862613db8f91fd68efc05820b0107fee212699bb59e7614647ed9cc329c22bcb89b98514f57930398867c5239f2790aa5af70ce50ad95de39387711a17
-
SSDEEP
49152:KgxwEmfpSI9KwLjNvpnan96S+bPjSD+vHx/l0DufEfQHWzR/ufEfQHz:hxZmzlvpaz+/cwHx/l0DufEfQHWzR/uT
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/MacOS/libxml2.2.dylib\""1⤵PID:490
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/MacOS/libxml2.2.dylib\""1⤵PID:490
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/MacOS/libxml2.2.dylib1⤵PID:490
-
/bin/zsh/bin/zsh -c /Users/run/MacOS/libxml2.2.dylib2⤵PID:492
-
-
/Users/run/MacOS/libxml2.2.dylib/Users/run/MacOS/libxml2.2.dylib2⤵PID:492
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:511
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:511