Analysis
-
max time kernel
95s -
max time network
150s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
23-10-2024 01:32
Static task
static1
Behavioral task
behavioral1
Sample
8d9cacf5c0689e332f4e043117ecdc533edf1b52b65179885ceb284ff706a6fe.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8d9cacf5c0689e332f4e043117ecdc533edf1b52b65179885ceb284ff706a6fe.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
frlighed.app
Resource
macos-20240711.1-en
General
-
Target
frlighed.app
-
Size
253KB
-
MD5
df7575b0a922eb9254c2fd55589079b5
-
SHA1
48e2566ab591ee6bc5715f8f38d834d9742a976c
-
SHA256
94d26d3c091c937f49c5e8a4822703c79c4b41182210daa4a9672f446bd7ffcc
-
SHA512
41cb5a47835fe8198d6a793cbdb1f01c5420c89fb7854975cc9aa678b990b4c2ad1e3541c0212ed09413c6ac402aabce37d82595913d6d4759cec0752f889cd9
-
SSDEEP
768:cA1hV6OhcgJ9H+VkvR1iNrNFhFO3S3nRyyFCHNDhzPZZKCVDz7nLZEXYHF5VFYao:bu4R0PIXFl5tpxiHqGgg
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"open /Users/run/frlighed.app\""1⤵PID:487
-
/bin/bashsh -c "sudo /bin/zsh -c \"open /Users/run/frlighed.app\""1⤵PID:487
-
/usr/bin/sudosudo /bin/zsh -c "open /Users/run/frlighed.app"1⤵PID:487
-
/bin/zsh/bin/zsh -c "open /Users/run/frlighed.app"2⤵PID:490
-
-
/usr/bin/openopen /Users/run/frlighed.app2⤵PID:490
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:516
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:516