Overview
overview
4Static
static
3windhawk_setup.exe
macos-10.15-amd64
4Compiler/i...ing.js
macos-10.15-amd64
1Compiler/i...iew.js
macos-10.15-amd64
1Compiler/i...ion.js
macos-10.15-amd64
1Compiler/i...ons.js
macos-10.15-amd64
1Compiler/i...ice.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...und.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...ing.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...ent.js
macos-10.15-amd64
1Compiler/i...ore.js
macos-10.15-amd64
1Compiler/i...ore.js
macos-10.15-amd64
1Compiler/i...get.js
macos-10.15-amd64
1Compiler/i...und.js
macos-10.15-amd64
1Compiler/i...ion.js
macos-10.15-amd64
1Compiler/i...hic.js
macos-10.15-amd64
1Compiler/i...een.js
macos-10.15-amd64
1Compiler/i...der.js
macos-10.15-amd64
1Compiler/i...nts.js
macos-10.15-amd64
1Compiler/i...hic.js
macos-10.15-amd64
1Compiler/i...ace.js
macos-10.15-amd64
1Compiler/i...tes.js
macos-10.15-amd64
1Compiler/i...ore.js
macos-10.15-amd64
1Compiler/i...ent.js
macos-10.15-amd64
1Compiler/i...ces.js
macos-10.15-amd64
1Compiler/i...ore.js
macos-10.15-amd64
1Compiler/i...ure.js
macos-10.15-amd64
1Compiler/i...D11.js
macos-10.15-amd64
1Analysis
-
max time kernel
127s -
max time network
148s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
05/10/2024, 17:21
Static task
static1
Behavioral task
behavioral1
Sample
windhawk_setup.exe
Resource
macos-20240711.1-en
Behavioral task
behavioral2
Sample
Compiler/include/wil/windowing.js
Resource
macos-20240711.1-en
Behavioral task
behavioral3
Sample
Compiler/include/winrt/Windows.AI.MachineLearning.Preview.js
Resource
macos-20240711.1-en
Behavioral task
behavioral4
Sample
Compiler/include/winrt/Windows.ApplicationModel.Activation.js
Resource
macos-20240711.1-en
Behavioral task
behavioral5
Sample
Compiler/include/winrt/Windows.ApplicationModel.AppExtensions.js
Resource
macos-20240711.1-en
Behavioral task
behavioral6
Sample
Compiler/include/winrt/Windows.ApplicationModel.AppService.js
Resource
macos-20240711.1-en
Behavioral task
behavioral7
Sample
Compiler/include/winrt/Windows.ApplicationModel.Appointments.AppointmentsProvider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral8
Sample
Compiler/include/winrt/Windows.ApplicationModel.Appointments.DataProvider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral9
Sample
Compiler/include/winrt/Windows.ApplicationModel.Calls.Background.js
Resource
macos-20240711.1-en
Behavioral task
behavioral10
Sample
Compiler/include/winrt/Windows.ApplicationModel.Calls.Provider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral11
Sample
Compiler/include/winrt/Windows.ApplicationModel.CommunicationBlocking.js
Resource
macos-20240711.1-en
Behavioral task
behavioral12
Sample
Compiler/include/winrt/Windows.ApplicationModel.Contacts.DataProvider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral13
Sample
Compiler/include/winrt/Windows.ApplicationModel.Contacts.Provider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral14
Sample
Compiler/include/winrt/Windows.ApplicationModel.ConversationalAgent.js
Resource
macos-20240711.1-en
Behavioral task
behavioral15
Sample
Compiler/include/winrt/Windows.ApplicationModel.Core.js
Resource
macos-20240711.1-en
Behavioral task
behavioral16
Sample
Compiler/include/winrt/Windows.ApplicationModel.DataTransfer.DragDrop.Core.js
Resource
macos-20240711.1-en
Behavioral task
behavioral17
Sample
Compiler/include/winrt/Windows.ApplicationModel.DataTransfer.ShareTarget.js
Resource
macos-20240711.1-en
Behavioral task
behavioral18
Sample
Compiler/include/winrt/Windows.ApplicationModel.ExtendedExecution.Foreground.js
Resource
macos-20240711.1-en
Behavioral task
behavioral19
Sample
Compiler/include/winrt/Windows.ApplicationModel.ExtendedExecution.js
Resource
macos-20240711.1-en
Behavioral task
behavioral20
Sample
Compiler/include/winrt/Windows.ApplicationModel.Holographic.js
Resource
macos-20240711.1-en
Behavioral task
behavioral21
Sample
Compiler/include/winrt/Windows.ApplicationModel.LockScreen.js
Resource
macos-20240711.1-en
Behavioral task
behavioral22
Sample
Compiler/include/winrt/Windows.ApplicationModel.Payments.Provider.js
Resource
macos-20240711.1-en
Behavioral task
behavioral23
Sample
Compiler/include/winrt/Windows.ApplicationModel.Payments.js
Resource
macos-20240711.1-en
Behavioral task
behavioral24
Sample
Compiler/include/winrt/Windows.ApplicationModel.Preview.Holographic.js
Resource
macos-20240711.1-en
Behavioral task
behavioral25
Sample
Compiler/include/winrt/Windows.ApplicationModel.Preview.InkWorkspace.js
Resource
macos-20240711.1-en
Behavioral task
behavioral26
Sample
Compiler/include/winrt/Windows.ApplicationModel.Preview.Notes.js
Resource
macos-20240711.1-en
Behavioral task
behavioral27
Sample
Compiler/include/winrt/Windows.ApplicationModel.Resources.Core.js
Resource
macos-20240711.1-en
Behavioral task
behavioral28
Sample
Compiler/include/winrt/Windows.ApplicationModel.Resources.Management.js
Resource
macos-20240711.1-en
Behavioral task
behavioral29
Sample
Compiler/include/winrt/Windows.ApplicationModel.Resources.js
Resource
macos-20240711.1-en
Behavioral task
behavioral30
Sample
Compiler/include/winrt/Windows.ApplicationModel.Search.Core.js
Resource
macos-20240711.1-en
Behavioral task
behavioral31
Sample
Compiler/include/winrt/Windows.Graphics.Capture.js
Resource
macos-20240711.1-en
Behavioral task
behavioral32
Sample
Compiler/include/winrt/Windows.Graphics.DirectX.Direct3D11.js
Resource
macos-20240711.1-en
General
-
Target
Compiler/include/winrt/Windows.ApplicationModel.Resources.Management.js
-
Size
14KB
-
MD5
b9a6395895ab1b1ca839f40d480bf528
-
SHA1
ae20573e45ce1f9a1a79d2b1da039efe19b325e9
-
SHA256
af892dd89c11f62aa8d5f8c20b26f7f925455d2562a2fa00a17b2ab351d78fa0
-
SHA512
1111d86bcf31dd076e9df51c7f0ef7b093cd526f533ac29b8b2d591780ab38f713a538b3acc4a5b64f136e177659e77cbcf8ffa2f1a01a3f5a664e325d6da3f0
-
SSDEEP
192:Jhtde4khBBa9sqR8m28Rt7l8NO868AxayDalana5Z/aNazabaqwha0WtUdaakpar:s5QRt+dnkAWtUuftAnEQ
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Compiler/include/winrt/Windows.ApplicationModel.Resources.Management.js\""1⤵PID:504
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Compiler/include/winrt/Windows.ApplicationModel.Resources.Management.js\""1⤵PID:504
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Compiler/include/winrt/Windows.ApplicationModel.Resources.Management.js1⤵PID:504
-
/bin/zsh/bin/zsh -c /Users/run/Compiler/include/winrt/Windows.ApplicationModel.Resources.Management.js2⤵PID:505
-
-
/Users/run/Compiler/include/winrt/Windows.ApplicationModel.Resources.Management.js/Users/run/Compiler/include/winrt/Windows.ApplicationModel.Resources.Management.js2⤵PID:505
-
-
/bin/shsh /Users/run/Compiler/include/winrt/Windows.ApplicationModel.Resources.Management.js2⤵PID:505
-
-
/bin/bashsh /Users/run/Compiler/include/winrt/Windows.ApplicationModel.Resources.Management.js2⤵PID:505
-