Overview
overview
4Static
static
3windhawk_setup.exe
macos-10.15-amd64
4Compiler/i...ing.js
macos-10.15-amd64
1Compiler/i...iew.js
macos-10.15-amd64
1Compiler/i...ion.js
macos-10.15-amd64
1Compiler/i...ons.js
macos-10.15-amd64
1Compiler/i...ice.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...und.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...ing.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...ent.js
macos-10.15-amd64
1Compiler/i...ore.js
macos-10.15-amd64
1Compiler/i...ore.js
macos-10.15-amd64
1Compiler/i...get.js
macos-10.15-amd64
1Compiler/i...und.js
macos-10.15-amd64
1Compiler/i...ion.js
macos-10.15-amd64
1Compiler/i...hic.js
macos-10.15-amd64
1Compiler/i...een.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...nts.js
macos-10.15-amd64
1Compiler/i...hic.js
macos-10.15-amd64
1Compiler/i...ace.js
macos-10.15-amd64
1Compiler/i...tes.js
macos-10.15-amd64
1Compiler/i...ore.js
macos-10.15-amd64
1Compiler/i...ent.js
macos-10.15-amd64
1Compiler/i...ces.js
macos-10.15-amd64
1Compiler/i...ore.js
macos-10.15-amd64
1Compiler/i...ure.js
macos-10.15-amd64
1Compiler/i...D11.js
macos-10.15-amd64
1Analysis
-
max time kernel
121s -
max time network
155s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
05/10/2024, 17:21
Static task
static1
Behavioral task
behavioral1
Sample
windhawk_setup.exe
Resource
macos-20240711.1-en
Behavioral task
behavioral2
Sample
Compiler/include/wil/windowing.js
Resource
macos-20240711.1-en
Behavioral task
behavioral3
Sample
Compiler/include/winrt/Windows.AI.MachineLearning.Preview.js
Resource
macos-20240711.1-en
Behavioral task
behavioral4
Sample
Compiler/include/winrt/Windows.ApplicationModel.Activation.js
Resource
macos-20240711.1-en
Behavioral task
behavioral5
Sample
Compiler/include/winrt/Windows.ApplicationModel.AppExtensions.js
Resource
macos-20240711.1-en
Behavioral task
behavioral6
Sample
Compiler/include/winrt/Windows.ApplicationModel.AppService.js
Resource
macos-20240711.1-en
Behavioral task
behavioral7
Sample
Compiler/include/winrt/Windows.ApplicationModel.Appointments.AppointmentsProvider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral8
Sample
Compiler/include/winrt/Windows.ApplicationModel.Appointments.DataProvider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral9
Sample
Compiler/include/winrt/Windows.ApplicationModel.Calls.Background.js
Resource
macos-20240711.1-en
Behavioral task
behavioral10
Sample
Compiler/include/winrt/Windows.ApplicationModel.Calls.Provider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral11
Sample
Compiler/include/winrt/Windows.ApplicationModel.CommunicationBlocking.js
Resource
macos-20240711.1-en
Behavioral task
behavioral12
Sample
Compiler/include/winrt/Windows.ApplicationModel.Contacts.DataProvider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral13
Sample
Compiler/include/winrt/Windows.ApplicationModel.Contacts.Provider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral14
Sample
Compiler/include/winrt/Windows.ApplicationModel.ConversationalAgent.js
Resource
macos-20240711.1-en
Behavioral task
behavioral15
Sample
Compiler/include/winrt/Windows.ApplicationModel.Core.js
Resource
macos-20240711.1-en
Behavioral task
behavioral16
Sample
Compiler/include/winrt/Windows.ApplicationModel.DataTransfer.DragDrop.Core.js
Resource
macos-20240711.1-en
Behavioral task
behavioral17
Sample
Compiler/include/winrt/Windows.ApplicationModel.DataTransfer.ShareTarget.js
Resource
macos-20240711.1-en
Behavioral task
behavioral18
Sample
Compiler/include/winrt/Windows.ApplicationModel.ExtendedExecution.Foreground.js
Resource
macos-20240711.1-en
Behavioral task
behavioral19
Sample
Compiler/include/winrt/Windows.ApplicationModel.ExtendedExecution.js
Resource
macos-20240711.1-en
Behavioral task
behavioral20
Sample
Compiler/include/winrt/Windows.ApplicationModel.Holographic.js
Resource
macos-20240711.1-en
Behavioral task
behavioral21
Sample
Compiler/include/winrt/Windows.ApplicationModel.LockScreen.js
Resource
macos-20240711.1-en
Behavioral task
behavioral22
Sample
Compiler/include/winrt/Windows.ApplicationModel.Payments.Provider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral23
Sample
Compiler/include/winrt/Windows.ApplicationModel.Payments.js
Resource
macos-20240711.1-en
Behavioral task
behavioral24
Sample
Compiler/include/winrt/Windows.ApplicationModel.Preview.Holographic.js
Resource
macos-20240711.1-en
Behavioral task
behavioral25
Sample
Compiler/include/winrt/Windows.ApplicationModel.Preview.InkWorkspace.js
Resource
macos-20240711.1-en
Behavioral task
behavioral26
Sample
Compiler/include/winrt/Windows.ApplicationModel.Preview.Notes.js
Resource
macos-20240711.1-en
Behavioral task
behavioral27
Sample
Compiler/include/winrt/Windows.ApplicationModel.Resources.Core.js
Resource
macos-20240711.1-en
Behavioral task
behavioral28
Sample
Compiler/include/winrt/Windows.ApplicationModel.Resources.Management.js
Resource
macos-20240711.1-en
Behavioral task
behavioral29
Sample
Compiler/include/winrt/Windows.ApplicationModel.Resources.js
Resource
macos-20240711.1-en
Behavioral task
behavioral30
Sample
Compiler/include/winrt/Windows.ApplicationModel.Search.Core.js
Resource
macos-20240711.1-en
Behavioral task
behavioral31
Sample
Compiler/include/winrt/Windows.Graphics.Capture.js
Resource
macos-20240711.1-en
Behavioral task
behavioral32
Sample
Compiler/include/winrt/Windows.Graphics.DirectX.Direct3D11.js
Resource
macos-20240711.1-en
General
-
Target
Compiler/include/winrt/Windows.ApplicationModel.Holographic.js
-
Size
6KB
-
MD5
4b91b44215278cf33306201e1e8c6a5f
-
SHA1
d469f8a4c8f8769ac237ff1e5643063a7dbd7c02
-
SHA256
f2b8391f0ae95f695588d7dfeceef085508e88ae334d1c8fabeb8c5e3e3bfe4d
-
SHA512
10a36e810e2bfebe743f455cbe968014b6888b70a69640fa04b4e945995553e5c34dca123df8b095a1f5e0d024b219eb8dc5e4cb501d8480d0bc52c43b414233
-
SSDEEP
96:rmDtm+shKRwnUwshKRwVDEmaTmOcCRwuaMRJ7+oasauazQ/5O:IaKanUwaKa6jTFJGuaM/XasauazQw
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Compiler/include/winrt/Windows.ApplicationModel.Holographic.js\""1⤵PID:513
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Compiler/include/winrt/Windows.ApplicationModel.Holographic.js\""1⤵PID:513
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Compiler/include/winrt/Windows.ApplicationModel.Holographic.js1⤵PID:513
-
/bin/zsh/bin/zsh -c /Users/run/Compiler/include/winrt/Windows.ApplicationModel.Holographic.js2⤵PID:514
-
-
/Users/run/Compiler/include/winrt/Windows.ApplicationModel.Holographic.js/Users/run/Compiler/include/winrt/Windows.ApplicationModel.Holographic.js2⤵PID:514
-
-
/bin/shsh /Users/run/Compiler/include/winrt/Windows.ApplicationModel.Holographic.js2⤵PID:514
-
-
/bin/bashsh /Users/run/Compiler/include/winrt/Windows.ApplicationModel.Holographic.js2⤵PID:514
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:517
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:517