e60928dee71b11866a826bc474a72b928327d1378ea80319819217cebcd53b2a

Submit
Reports

Overview

overview

Static

static

windhawk_setup.exe

macos-10.15-amd64

Compiler/i...ing.js

macos-10.15-amd64

Compiler/i...iew.js

macos-10.15-amd64

Compiler/i...ion.js

macos-10.15-amd64

Compiler/i...ons.js

macos-10.15-amd64

Compiler/i...ice.js

macos-10.15-amd64

Compiler/i...der.js

macos-10.15-amd64

Compiler/i...der.js

macos-10.15-amd64

Compiler/i...und.js

macos-10.15-amd64

Compiler/i...der.js

macos-10.15-amd64

Compiler/i...ing.js

macos-10.15-amd64

Compiler/i...der.js

macos-10.15-amd64

Compiler/i...der.js

macos-10.15-amd64

Compiler/i...ent.js

macos-10.15-amd64

Compiler/i...ore.js

macos-10.15-amd64

Compiler/i...ore.js

macos-10.15-amd64

Compiler/i...get.js

macos-10.15-amd64

Compiler/i...und.js

macos-10.15-amd64

Compiler/i...ion.js

macos-10.15-amd64

Compiler/i...hic.js

macos-10.15-amd64

Compiler/i...een.js

macos-10.15-amd64

Compiler/i...der.js

macos-10.15-amd64

Compiler/i...nts.js

macos-10.15-amd64

Compiler/i...hic.js

macos-10.15-amd64

Compiler/i...ace.js

macos-10.15-amd64

Compiler/i...tes.js

macos-10.15-amd64

Compiler/i...ore.js

macos-10.15-amd64

Compiler/i...ent.js

macos-10.15-amd64

Compiler/i...ces.js

macos-10.15-amd64

Compiler/i...ore.js

macos-10.15-amd64

Compiler/i...ure.js

macos-10.15-amd64

Compiler/i...D11.js

macos-10.15-amd64

Resubmissions

05/10/2024, 17:22

241005-vx29ssseke 7

05/10/2024, 17:21

241005-vw7g5axfkn 4

Analysis

max time kernel
145s
max time network
148s
platform
macos-10.15_amd64
resource
macos-20240711.1-en
resource tags

arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
05/10/2024, 17:21

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

windhawk_setup.exe

Resource

macos-20240711.1-en

evasion

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

Compiler/include/wil/windowing.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Compiler/include/winrt/Windows.AI.MachineLearning.Preview.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Compiler/include/winrt/Windows.ApplicationModel.Activation.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Compiler/include/winrt/Windows.ApplicationModel.AppExtensions.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Compiler/include/winrt/Windows.ApplicationModel.AppService.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Compiler/include/winrt/Windows.ApplicationModel.Appointments.AppointmentsProvider.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Compiler/include/winrt/Windows.ApplicationModel.Appointments.DataProvider.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Compiler/include/winrt/Windows.ApplicationModel.Calls.Background.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Compiler/include/winrt/Windows.ApplicationModel.Calls.Provider.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Compiler/include/winrt/Windows.ApplicationModel.CommunicationBlocking.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Compiler/include/winrt/Windows.ApplicationModel.Contacts.DataProvider.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Compiler/include/winrt/Windows.ApplicationModel.Contacts.Provider.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Compiler/include/winrt/Windows.ApplicationModel.ConversationalAgent.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Compiler/include/winrt/Windows.ApplicationModel.Core.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Compiler/include/winrt/Windows.ApplicationModel.DataTransfer.DragDrop.Core.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Compiler/include/winrt/Windows.ApplicationModel.DataTransfer.ShareTarget.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Compiler/include/winrt/Windows.ApplicationModel.ExtendedExecution.Foreground.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Compiler/include/winrt/Windows.ApplicationModel.ExtendedExecution.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Compiler/include/winrt/Windows.ApplicationModel.Holographic.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Compiler/include/winrt/Windows.ApplicationModel.LockScreen.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Compiler/include/winrt/Windows.ApplicationModel.Payments.Provider.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Compiler/include/winrt/Windows.ApplicationModel.Payments.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Compiler/include/winrt/Windows.ApplicationModel.Preview.Holographic.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Compiler/include/winrt/Windows.ApplicationModel.Preview.InkWorkspace.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Compiler/include/winrt/Windows.ApplicationModel.Preview.Notes.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Compiler/include/winrt/Windows.ApplicationModel.Resources.Core.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Compiler/include/winrt/Windows.ApplicationModel.Resources.Management.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Compiler/include/winrt/Windows.ApplicationModel.Resources.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Compiler/include/winrt/Windows.ApplicationModel.Search.Core.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Compiler/include/winrt/Windows.Graphics.Capture.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Compiler/include/winrt/Windows.Graphics.DirectX.Direct3D11.js

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Compiler/include/winrt/Windows.ApplicationModel.AppService.js
Size

34KB
MD5

4632b32789a4d249cbd9cd207199b340
SHA1

b6fc75ffa085d62f9b06e8d879fe366541fd6591
SHA256

4c573586a0a59d7b76a2b2a53c7d894bc53f63f456f18d7683fec209438902c7
SHA512

3274562b2cb6db4c02bf5cffb41ba7da262b3c91dae62f7c0621d26473726ca949e7c0ff7d1d20552f99d9f9fb443cc411d3efd024183e8e345f8e793b8a06e4
SSDEEP

768:ghnAPYLPcrq+KZWdDOTtLMjqAaRPqEVrWsOTWp:w

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Compiler/include/winrt/Windows.ApplicationModel.AppService.js\""
1⤵
PID:500

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Compiler/include/winrt/Windows.ApplicationModel.AppService.js\""
1⤵
PID:500

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Compiler/include/winrt/Windows.ApplicationModel.AppService.js
1⤵
PID:500
- /bin/zsh
  /bin/zsh -c /Users/run/Compiler/include/winrt/Windows.ApplicationModel.AppService.js
  2⤵
  PID:501
- /Users/run/Compiler/include/winrt/Windows.ApplicationModel.AppService.js
  /Users/run/Compiler/include/winrt/Windows.ApplicationModel.AppService.js
  2⤵
  PID:501
- /bin/sh
  sh /Users/run/Compiler/include/winrt/Windows.ApplicationModel.AppService.js
  2⤵
  PID:501
- /bin/bash
  sh /Users/run/Compiler/include/winrt/Windows.ApplicationModel.AppService.js
  2⤵
  PID:501

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads