590df705f6169023aea706e9cd91e10c54d2b47f58e8b40578aa1a990590d822

Analysis

max time kernel
123s
max time network
125s
platform
macos-10.15_amd64
resource
macos-20240711.1-en
resource tags

arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
24-09-2024 15:23

Target

2024-09-24_22f58af628de6bd63f56efe5f1a74de5_adload_evilquest_rekoobe
Size

80KB
MD5

22f58af628de6bd63f56efe5f1a74de5
SHA1

4fa5299e5e0145ac2a0c8f99f0d36ea0a99d4952
SHA256

590df705f6169023aea706e9cd91e10c54d2b47f58e8b40578aa1a990590d822
SHA512

82de38fcf15662aa4f8da9cabc75fb3c05a643f4b19ff4a201b0f2b26cad21d70503fa370ab6f59a59ffe25e09ea89aaeada8d8d90dab3479e5c75baddb8a102
SSDEEP

768:c8o27RaSy6ISKpHnDzuJs0MdiqNi9cjHl3NI6/WQonko3BIDvUSynA234+hV4lYb:8a1y6Wy05/WQe3BIDmMVj5Snfn4

Score

1^/10

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/2024-09-24_22f58af628de6bd63f56efe5f1a74de5_adload_evilquest_rekoobe\""
1⤵
PID:486

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/2024-09-24_22f58af628de6bd63f56efe5f1a74de5_adload_evilquest_rekoobe\""
1⤵
PID:486

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/2024-09-24_22f58af628de6bd63f56efe5f1a74de5_adload_evilquest_rekoobe
1⤵
PID:486
- /bin/zsh
  /bin/zsh -c /Users/run/2024-09-24_22f58af628de6bd63f56efe5f1a74de5_adload_evilquest_rekoobe
  2⤵
  PID:489
- /Users/run/2024-09-24_22f58af628de6bd63f56efe5f1a74de5_adload_evilquest_rekoobe
  /Users/run/2024-09-24_22f58af628de6bd63f56efe5f1a74de5_adload_evilquest_rekoobe
  2⤵
  PID:489

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:528

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:529

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:533

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:533