Overview
overview
4Static
static
3windhawk_setup.exe
macos-10.15-amd64
4Compiler/i...ing.js
macos-10.15-amd64
1Compiler/i...iew.js
macos-10.15-amd64
1Compiler/i...ion.js
macos-10.15-amd64
1Compiler/i...ons.js
macos-10.15-amd64
1Compiler/i...ice.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...und.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...ing.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...ent.js
macos-10.15-amd64
1Compiler/i...ore.js
macos-10.15-amd64
1Compiler/i...ore.js
macos-10.15-amd64
1Compiler/i...get.js
macos-10.15-amd64
1Compiler/i...und.js
macos-10.15-amd64
1Compiler/i...ion.js
macos-10.15-amd64
1Compiler/i...hic.js
macos-10.15-amd64
1Compiler/i...een.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...nts.js
macos-10.15-amd64
1Compiler/i...hic.js
macos-10.15-amd64
1Compiler/i...ace.js
macos-10.15-amd64
1Compiler/i...tes.js
macos-10.15-amd64
1Compiler/i...ore.js
macos-10.15-amd64
1Compiler/i...ent.js
macos-10.15-amd64
1Compiler/i...ces.js
macos-10.15-amd64
1Compiler/i...ore.js
macos-10.15-amd64
1Compiler/i...ure.js
macos-10.15-amd64
1Compiler/i...D11.js
macos-10.15-amd64
1Analysis
-
max time kernel
136s -
max time network
157s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
05/10/2024, 17:21
Static task
static1
Behavioral task
behavioral1
Sample
windhawk_setup.exe
Resource
macos-20240711.1-en
Behavioral task
behavioral2
Sample
Compiler/include/wil/windowing.js
Resource
macos-20240711.1-en
Behavioral task
behavioral3
Sample
Compiler/include/winrt/Windows.AI.MachineLearning.Preview.js
Resource
macos-20240711.1-en
Behavioral task
behavioral4
Sample
Compiler/include/winrt/Windows.ApplicationModel.Activation.js
Resource
macos-20240711.1-en
Behavioral task
behavioral5
Sample
Compiler/include/winrt/Windows.ApplicationModel.AppExtensions.js
Resource
macos-20240711.1-en
Behavioral task
behavioral6
Sample
Compiler/include/winrt/Windows.ApplicationModel.AppService.js
Resource
macos-20240711.1-en
Behavioral task
behavioral7
Sample
Compiler/include/winrt/Windows.ApplicationModel.Appointments.AppointmentsProvider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral8
Sample
Compiler/include/winrt/Windows.ApplicationModel.Appointments.DataProvider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral9
Sample
Compiler/include/winrt/Windows.ApplicationModel.Calls.Background.js
Resource
macos-20240711.1-en
Behavioral task
behavioral10
Sample
Compiler/include/winrt/Windows.ApplicationModel.Calls.Provider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral11
Sample
Compiler/include/winrt/Windows.ApplicationModel.CommunicationBlocking.js
Resource
macos-20240711.1-en
Behavioral task
behavioral12
Sample
Compiler/include/winrt/Windows.ApplicationModel.Contacts.DataProvider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral13
Sample
Compiler/include/winrt/Windows.ApplicationModel.Contacts.Provider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral14
Sample
Compiler/include/winrt/Windows.ApplicationModel.ConversationalAgent.js
Resource
macos-20240711.1-en
Behavioral task
behavioral15
Sample
Compiler/include/winrt/Windows.ApplicationModel.Core.js
Resource
macos-20240711.1-en
Behavioral task
behavioral16
Sample
Compiler/include/winrt/Windows.ApplicationModel.DataTransfer.DragDrop.Core.js
Resource
macos-20240711.1-en
Behavioral task
behavioral17
Sample
Compiler/include/winrt/Windows.ApplicationModel.DataTransfer.ShareTarget.js
Resource
macos-20240711.1-en
Behavioral task
behavioral18
Sample
Compiler/include/winrt/Windows.ApplicationModel.ExtendedExecution.Foreground.js
Resource
macos-20240711.1-en
Behavioral task
behavioral19
Sample
Compiler/include/winrt/Windows.ApplicationModel.ExtendedExecution.js
Resource
macos-20240711.1-en
Behavioral task
behavioral20
Sample
Compiler/include/winrt/Windows.ApplicationModel.Holographic.js
Resource
macos-20240711.1-en
Behavioral task
behavioral21
Sample
Compiler/include/winrt/Windows.ApplicationModel.LockScreen.js
Resource
macos-20240711.1-en
Behavioral task
behavioral22
Sample
Compiler/include/winrt/Windows.ApplicationModel.Payments.Provider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral23
Sample
Compiler/include/winrt/Windows.ApplicationModel.Payments.js
Resource
macos-20240711.1-en
Behavioral task
behavioral24
Sample
Compiler/include/winrt/Windows.ApplicationModel.Preview.Holographic.js
Resource
macos-20240711.1-en
Behavioral task
behavioral25
Sample
Compiler/include/winrt/Windows.ApplicationModel.Preview.InkWorkspace.js
Resource
macos-20240711.1-en
Behavioral task
behavioral26
Sample
Compiler/include/winrt/Windows.ApplicationModel.Preview.Notes.js
Resource
macos-20240711.1-en
Behavioral task
behavioral27
Sample
Compiler/include/winrt/Windows.ApplicationModel.Resources.Core.js
Resource
macos-20240711.1-en
Behavioral task
behavioral28
Sample
Compiler/include/winrt/Windows.ApplicationModel.Resources.Management.js
Resource
macos-20240711.1-en
Behavioral task
behavioral29
Sample
Compiler/include/winrt/Windows.ApplicationModel.Resources.js
Resource
macos-20240711.1-en
Behavioral task
behavioral30
Sample
Compiler/include/winrt/Windows.ApplicationModel.Search.Core.js
Resource
macos-20240711.1-en
Behavioral task
behavioral31
Sample
Compiler/include/winrt/Windows.Graphics.Capture.js
Resource
macos-20240711.1-en
Behavioral task
behavioral32
Sample
Compiler/include/winrt/Windows.Graphics.DirectX.Direct3D11.js
Resource
macos-20240711.1-en
General
-
Target
Compiler/include/winrt/Windows.ApplicationModel.Contacts.Provider.js
-
Size
10KB
-
MD5
8442865c2db52e3e45992a1464213e49
-
SHA1
8fef37e62a0e7c9a6c156bbd6ee52fcc79c5819b
-
SHA256
ec22a156a62331ac4598e04e908c5349dbc4f07fc0a5eb3b431d5e129950c693
-
SHA512
b041b32d0f5bfb83a1b0989b46757e062a5953492b037563b8d93b41bf8ca2c9bc9f2a4619e922b1dc49708cd23ba124cfcedfe7b83297b222d24e6da39c1333
-
SSDEEP
192:94ithOMVONnsQJn1MgonmZns/n9/Vp4nS/VHnyuXnKMVOknWanhQYPrXaXaLazaG:dOwQ85S3r
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Compiler/include/winrt/Windows.ApplicationModel.Contacts.Provider.js\""1⤵PID:510
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Compiler/include/winrt/Windows.ApplicationModel.Contacts.Provider.js\""1⤵PID:510
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Compiler/include/winrt/Windows.ApplicationModel.Contacts.Provider.js1⤵PID:510
-
/bin/zsh/bin/zsh -c /Users/run/Compiler/include/winrt/Windows.ApplicationModel.Contacts.Provider.js2⤵PID:511
-
-
/Users/run/Compiler/include/winrt/Windows.ApplicationModel.Contacts.Provider.js/Users/run/Compiler/include/winrt/Windows.ApplicationModel.Contacts.Provider.js2⤵PID:511
-
-
/bin/shsh /Users/run/Compiler/include/winrt/Windows.ApplicationModel.Contacts.Provider.js2⤵PID:511
-
-
/bin/bashsh /Users/run/Compiler/include/winrt/Windows.ApplicationModel.Contacts.Provider.js2⤵PID:511
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:512
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:512