9ab258db43693b78593325ee6bdd1ff2632b7db42d31eb35ba5118d0e5729ed5

Analysis

max time kernel
124s
max time network
121s
platform
macos-10.15_amd64
resource
macos-20240711.1-en
resource tags

arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
05/09/2024, 08:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Minecraft/Minecraft.app/Contents/runtime/jre-x64/1.8.0_74/lib/charsets.jar
Size

3.0MB
MD5

634137d4e5d8d667a49bb5f7c746434b
SHA1

98ebf8d7ce1cffd71bf5c87dd1be9b96ad16964f
SHA256

35049f4bd88e423cbd9734f82a7bb8e5ce701f3e1558754f1b71e58fc7411e6e
SHA512

431ff5ea91905d737adbf7c2b527a97ed3d0638decf47fadcabdb3a7e1a64c284d5b873387ab61bca033ca5fd1a5bbf5823b97d5985f41c8c005c8326e6ae652
SSDEEP

49152:X6ZiLV4TQOYEX9vniyAksx6xgc1sO3lbgSYty:X6Zip4s+kR/cu2lbgy

Score

4^/10

execution

Malware Config

Signatures

JavaScript 1 TTPs 1 IoCs

Adversaries may abuse various implementations of JavaScript for execution.

execution

JavaScript

T1059.007

ioc	Process
"/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java" -jar /Users/run/Minecraft/Minecraft.app/Contents/runtime/jre-x64/1.8.0_74/lib/charsets.jar	Process not Found

/bin/sh
sh -c "sudo /bin/zsh -c \"open /Users/run/Minecraft/Minecraft.app/Contents/runtime/jre-x64/1.8.0_74/lib/charsets.jar\""
1⤵
PID:500

/bin/bash
sh -c "sudo /bin/zsh -c \"open /Users/run/Minecraft/Minecraft.app/Contents/runtime/jre-x64/1.8.0_74/lib/charsets.jar\""
1⤵
PID:500

/usr/bin/sudo
sudo /bin/zsh -c "open /Users/run/Minecraft/Minecraft.app/Contents/runtime/jre-x64/1.8.0_74/lib/charsets.jar"
1⤵
PID:500
- /bin/zsh
  /bin/zsh -c "open /Users/run/Minecraft/Minecraft.app/Contents/runtime/jre-x64/1.8.0_74/lib/charsets.jar"
  2⤵
  PID:501
- /usr/bin/open
  open /Users/run/Minecraft/Minecraft.app/Contents/runtime/jre-x64/1.8.0_74/lib/charsets.jar
  2⤵
  PID:501

/usr/libexec/xpcproxy
xpcproxy com.apple.JarLauncher.1532
1⤵
PID:502

/System/Library/CoreServices/Jar Launcher.app/Contents/MacOS/Jar Launcher
"/System/Library/CoreServices/Jar Launcher.app/Contents/MacOS/Jar Launcher"
1⤵
PID:502
- /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java
  "/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java" -jar /Users/run/Minecraft/Minecraft.app/Contents/runtime/jre-x64/1.8.0_74/lib/charsets.jar
  2⤵
  PID:504

/usr/libexec/xpcproxy
xpcproxy com.apple.metadata.mdwrite
1⤵
PID:503

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...