Analysis

  • max time kernel
    146s
  • max time network
    158s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    11-09-2024 08:10

General

  • Target

    Omni Downloader/Omni Downloader.app/Contents/Frameworks/UntilityCore.dylib

  • Size

    5.2MB

  • MD5

    b76c8e7bc6d1d4d3f1852b05bf43fe06

  • SHA1

    16490b24f3a7d25a3a59188c934bfd7c373728b8

  • SHA256

    e04a7e36d49eac5a0867f68e24e3af6304feb1bed926f5a613bfa4c409848207

  • SHA512

    b4041c1196b62a4c21c2b8d01cfc1fa45aa969ec909fa9bc234c46ddac0361f0d29225777b20c53a859898414192ac857d17257a5311c13a7f65014308610b88

  • SSDEEP

    98304:8cNnlFhh4/ehjebQ0rwKVotIxb2AxpotIxcuhNKKFeHwK7t1IxbiAxDIx4:8MnlFQ1otIxbjotIxcJK+t1IxbJIx4

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Omni Downloader/Omni Downloader.app/Contents/Frameworks/UntilityCore.dylib\""
    1⤵
      PID:512
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Omni Downloader/Omni Downloader.app/Contents/Frameworks/UntilityCore.dylib\""
      1⤵
        PID:512
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/Omni Downloader/Omni Downloader.app/Contents/Frameworks/UntilityCore.dylib"
        1⤵
          PID:512
          • /bin/zsh
            /bin/zsh -c "/Users/run/Omni Downloader/Omni Downloader.app/Contents/Frameworks/UntilityCore.dylib"
            2⤵
              PID:513
            • /Users/run/Omni
              /Users/run/Omni Downloader/Omni Downloader.app/Contents/Frameworks/UntilityCore.dylib
              2⤵
                PID:513
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
              1⤵
                PID:532
              • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                1⤵
                  PID:532
                • /bin/launchctl
                  /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
                  1⤵
                    PID:538
                  • /bin/launchctl
                    /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
                    1⤵
                      PID:539

                    Network

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads