Resubmissions

05/10/2024, 17:22

241005-vx29ssseke 7

05/10/2024, 17:21

241005-vw7g5axfkn 4

Analysis

  • max time kernel
    117s
  • max time network
    143s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    05/10/2024, 17:21

General

  • Target

    Compiler/include/winrt/Windows.ApplicationModel.CommunicationBlocking.js

  • Size

    12KB

  • MD5

    7c6f390d5b1c8d97a0df8bd5b7630984

  • SHA1

    4818df82719d72941c3125e34470a03dcc1c9420

  • SHA256

    4ad3be531007415956f261cd97fcbe6403d81286f7a8c0ae1708a97a3af1971e

  • SHA512

    3948fafee999355fa0cea22f64c3f9482c2772df9e0ffe3575d8d2a826bf33df33ca7610bbe8e7f17b8f6f9e99592af35bb0451fe974d7f5073858d94316a5c6

  • SSDEEP

    192:ZcNrl5RzoRgo6xlTh3cavkFa7a3aIaca1asaFJaXfUHN0f7k3j53mofVnfqWw5pJ:eLRURpwf3f+043t3xfNfvwLwQaZ2

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Compiler/include/winrt/Windows.ApplicationModel.CommunicationBlocking.js\""
    1⤵
      PID:502
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Compiler/include/winrt/Windows.ApplicationModel.CommunicationBlocking.js\""
      1⤵
        PID:502
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/Compiler/include/winrt/Windows.ApplicationModel.CommunicationBlocking.js
        1⤵
          PID:502
          • /bin/zsh
            /bin/zsh -c /Users/run/Compiler/include/winrt/Windows.ApplicationModel.CommunicationBlocking.js
            2⤵
              PID:503
            • /Users/run/Compiler/include/winrt/Windows.ApplicationModel.CommunicationBlocking.js
              /Users/run/Compiler/include/winrt/Windows.ApplicationModel.CommunicationBlocking.js
              2⤵
                PID:503
              • /bin/sh
                sh /Users/run/Compiler/include/winrt/Windows.ApplicationModel.CommunicationBlocking.js
                2⤵
                  PID:503
                • /bin/bash
                  sh /Users/run/Compiler/include/winrt/Windows.ApplicationModel.CommunicationBlocking.js
                  2⤵
                    PID:503

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads