Analysis

  • max time kernel
    133s
  • max time network
    126s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    23-09-2024 04:00

General

  • Target

    bea9fc669319cd16df759974397e79c05e7565e75ca7c052af346e08b5f1d13a.exe

  • Size

    216KB

  • MD5

    f491169c61e8aa6cfa83e00c3f7e85e2

  • SHA1

    91b843f4747ae0a97f83b6cba7f329f6a1503928

  • SHA256

    bea9fc669319cd16df759974397e79c05e7565e75ca7c052af346e08b5f1d13a

  • SHA512

    e0c2a061404f9d0333c62366e6974445eb6349f6a900b5c7fe40fa9c6f74c94637f2ca0bc9fc03dfed7b654312dfc89b5f92602caf9699f0b22ed28ae9f0ea8d

  • SSDEEP

    3072:7GWebH9OGNKb/ApyjbFSHZUsSeiMeK++koKcqIQKUsWlB32wufpxSkVPs6v9cwxe:7ejpyjA5UbMX+n7O/Wld23dzopTk

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/bea9fc669319cd16df759974397e79c05e7565e75ca7c052af346e08b5f1d13a.exe\""
    1⤵
      PID:487
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/bea9fc669319cd16df759974397e79c05e7565e75ca7c052af346e08b5f1d13a.exe\""
      1⤵
        PID:487
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/bea9fc669319cd16df759974397e79c05e7565e75ca7c052af346e08b5f1d13a.exe
        1⤵
          PID:487
          • /bin/zsh
            /bin/zsh -c /Users/run/bea9fc669319cd16df759974397e79c05e7565e75ca7c052af346e08b5f1d13a.exe
            2⤵
              PID:490
            • /Users/run/bea9fc669319cd16df759974397e79c05e7565e75ca7c052af346e08b5f1d13a.exe
              /Users/run/bea9fc669319cd16df759974397e79c05e7565e75ca7c052af346e08b5f1d13a.exe
              2⤵
                PID:490
            • /bin/launchctl
              /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
              1⤵
                PID:524
              • /bin/launchctl
                /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
                1⤵
                  PID:525
                • /usr/libexec/xpcproxy
                  xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
                  1⤵
                    PID:529
                  • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                    /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                    1⤵
                      PID:529

                    Network

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads