Analysis
-
max time kernel
118s -
max time network
130s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
12/09/2024, 13:34
Static task
static1
Behavioral task
behavioral1
Sample
2032140bb0723540e7fc5a8fdf42e12bccf7cc998567f0787e8d7604cc9e839b
Resource
macos-20240711.1-en
0 signatures
150 seconds
General
-
Target
2032140bb0723540e7fc5a8fdf42e12bccf7cc998567f0787e8d7604cc9e839b
-
Size
661KB
-
MD5
7ac0928608720d75ec9347c2f8d385a6
-
SHA1
660032c1663c85928896d80a4d5aaf17d4654ab2
-
SHA256
2032140bb0723540e7fc5a8fdf42e12bccf7cc998567f0787e8d7604cc9e839b
-
SHA512
35b32a6173bbd7b3d36aa37a38b80fc862cf647173ee9167b9c62be9d9615c9a10afd371c9c8338596901add36a6669ef82b6aa53f698c419ab05fea4eaa1ceb
-
SSDEEP
12288:Vab3ABlA5GrjyyXYw7N642otslR0q6oJdK:VyQjPr64ttiv6GU
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/2032140bb0723540e7fc5a8fdf42e12bccf7cc998567f0787e8d7604cc9e839b\""1⤵PID:487
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/2032140bb0723540e7fc5a8fdf42e12bccf7cc998567f0787e8d7604cc9e839b\""1⤵PID:487
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/2032140bb0723540e7fc5a8fdf42e12bccf7cc998567f0787e8d7604cc9e839b1⤵PID:487
-
/bin/zsh/bin/zsh -c /Users/run/2032140bb0723540e7fc5a8fdf42e12bccf7cc998567f0787e8d7604cc9e839b2⤵PID:489
-
-
/Users/run/2032140bb0723540e7fc5a8fdf42e12bccf7cc998567f0787e8d7604cc9e839b/Users/run/2032140bb0723540e7fc5a8fdf42e12bccf7cc998567f0787e8d7604cc9e839b2⤵PID:489
-
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:523
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:524
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:530
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:530