Analysis

  • max time kernel
    130s
  • max time network
    142s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    11-09-2024 08:10

General

  • Target

    Omni Downloader/Omni Downloader.app/Contents/Frameworks/SqliteManager.dylib

  • Size

    433KB

  • MD5

    c4db6956052ce7fb42c789f35d42a3a3

  • SHA1

    2cef7f05f326b99c1e60c289f0bc2833f4c7a977

  • SHA256

    c67068a19af775b4275696ddc0e1e66da0753458b9590b9ad34a524095c21cbb

  • SHA512

    65c976924c225183c2adedb5baf9441d94700a6ee6aa210010e9f4d1b62fcd6a27e52f6c8fc76d795d6abaaf33c254f6f93a2ae13b8453887b7b6a23c441230a

  • SSDEEP

    6144:MhXP9Ajkfwtjb4Zb2T5po4YJsljbakb3:Q1AjntQ8p/YJOC

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Omni Downloader/Omni Downloader.app/Contents/Frameworks/SqliteManager.dylib\""
    1⤵
      PID:482
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Omni Downloader/Omni Downloader.app/Contents/Frameworks/SqliteManager.dylib\""
      1⤵
        PID:482
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/Omni Downloader/Omni Downloader.app/Contents/Frameworks/SqliteManager.dylib"
        1⤵
          PID:482
          • /bin/zsh
            /bin/zsh -c "/Users/run/Omni Downloader/Omni Downloader.app/Contents/Frameworks/SqliteManager.dylib"
            2⤵
              PID:483
            • /Users/run/Omni
              /Users/run/Omni Downloader/Omni Downloader.app/Contents/Frameworks/SqliteManager.dylib
              2⤵
                PID:483

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads