Overview
overview
4Static
static
1__MACOSX/....dle403
windows7-x64
3__MACOSX/....dle403
windows10-2004-x64
3__MACOSX/c..._store
windows7-x64
3__MACOSX/c..._store
windows10-2004-x64
3__MACOSX/c...es.rtf
windows7-x64
3__MACOSX/c...es.rtf
windows10-2004-x64
1__MACOSX/c...03.dmg
macos-10.15-amd64
cr-paddle4..._store
windows7-x64
3cr-paddle4..._store
windows10-2004-x64
3cr-paddle4...es.rtf
windows7-x64
4cr-paddle4...es.rtf
windows10-2004-x64
1cr-paddle4...03.dmg
macos-10.15-amd64
1Analysis
-
max time kernel
83s -
max time network
121s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
21-09-2024 03:49
Static task
static1
Behavioral task
behavioral1
Sample
__MACOSX/._cr-paddle403
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
__MACOSX/._cr-paddle403
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
__MACOSX/cr-paddle403/._.ds_store
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
__MACOSX/cr-paddle403/._.ds_store
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
__MACOSX/cr-paddle403/._Install Notes.rtf
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
__MACOSX/cr-paddle403/._Install Notes.rtf
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
__MACOSX/cr-paddle403/._cr-paddle403.dmg
Resource
macos-20240711.1-en
Behavioral task
behavioral8
Sample
cr-paddle403/.ds_store
Resource
win7-20240704-en
Behavioral task
behavioral9
Sample
cr-paddle403/.ds_store
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
cr-paddle403/Install Notes.rtf
Resource
win7-20240903-en
Behavioral task
behavioral11
Sample
cr-paddle403/Install Notes.rtf
Resource
win10v2004-20240910-en
Behavioral task
behavioral12
Sample
cr-paddle403/cr-paddle403.dmg
Resource
macos-20240711.1-en
General
-
Target
cr-paddle403/cr-paddle403.dmg
-
Size
616KB
-
MD5
d8d8fa31547b6f88bf64671327c318f3
-
SHA1
ff0d00b86a55bca6f376f85cd92fb64e81e156bd
-
SHA256
9aa6c387622d16a81875d01c1a265733779e41f825d9361253612d6cd6cd0bc5
-
SHA512
21e0dd10f57c308a082ed2e259ecfedcf26a08c7ef03d9a122bdd62ea6ac89a2b097e5f007e196a6ce63d903f5dce43a150250d588833ca212c6c6d7edb75a04
-
SSDEEP
12288:Cd+weBgF0CavGQwBjb4z25ihT/ZKfV6FQL3YlcADG1flUnSV/Qr2:qveOiCa5wBjcz2aDZJgAG1flyy
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"open /Volumes/Paddle\\ Generic\\ KFG\\ |\\ CORE/CORE\\ Keygen.app\""1⤵PID:520
-
/bin/bashsh -c "sudo /bin/zsh -c \"open /Volumes/Paddle\\ Generic\\ KFG\\ |\\ CORE/CORE\\ Keygen.app\""1⤵PID:520
-
/usr/bin/sudosudo /bin/zsh -c "open /Volumes/Paddle\\ Generic\\ KFG\\ |\\ CORE/CORE\\ Keygen.app"1⤵PID:520
-
/bin/zsh/bin/zsh -c "open /Volumes/Paddle\\ Generic\\ KFG\\ |\\ CORE/CORE\\ Keygen.app"2⤵PID:521
-
CORE/CORE Keygen.app" CORE/CORE Keygen.app"3⤵PID:523
-
-
/usr/bin/openopen "/Volumes/Paddle Generic KFG "3⤵PID:522
-
-