Resubmissions
14/09/2024, 16:35
240914-t338lsthkf14/09/2024, 16:34
240914-t3a7tstcml614/09/2024, 16:33
240914-t2ylqstgph714/09/2024, 16:32
240914-t2ehvstbrp614/09/2024, 16:32
240914-t128jatgmd7Analysis
- max time kernel
244s - max time network
262s - platform
macos-10.15_amd64 - resource
macos-20240711.1-en - resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
14/09/2024, 16:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kanade-armeabi-v7a-v0.5.0.apk
Resource
android-x64-20240624-en
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
kanade-armeabi-v7a-v0.5.0.apk
Resource
macos-20240711.1-en
0 signatures
300 seconds
General
- Target kanade-armeabi-v7a-v0.5.0.apk
- Size 9.9MB
- Sample240914-t3a7tstcml
- SHA256 fe9f351cdfc63e22263e05af489538ced6b0891afdf8d778128849275344c6a5
- MD5 1c139a009f71675a9fe4cf8b5b54a5c2
- SHA1 8deb9f4739597aa8554e919a8364cecdb7183390
- SHA512 8c9d40e95c752a553e5d3252c016e7fbe4a1705d40dbb5ad2760b5c357a25fa14697f3d43685535d757519e914d9804ab058aa4733866044e4a49311a6c1d0bb
- SSDEEP 196608:puEnHcv9OBK/f8CDG6LGPqqIZV5sRdzpjE8cTKxk0hbQ444F9rR/NzeiREF+R:pu2cv9OBK38CCWn5Ap7c2o44CxRRa+R
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/kanade-armeabi-v7a-v0.5.0.apk\""1⤵PID:482
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/kanade-armeabi-v7a-v0.5.0.apk\""1⤵PID:482
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/kanade-armeabi-v7a-v0.5.0.apk1⤵PID:482
-
/bin/zsh/bin/zsh -c /Users/run/kanade-armeabi-v7a-v0.5.0.apk2⤵PID:483
-
-
/Users/run/kanade-armeabi-v7a-v0.5.0.apk/Users/run/kanade-armeabi-v7a-v0.5.0.apk2⤵PID:483
-
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:516
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:517
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:521
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:521