Analysis
-
max time kernel
1499s -
max time network
1522s -
platform
macos-10.15_amd64 -
resource
macos-20241101-en -
resource tags
arch:amd64arch:i386image:macos-20241101-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
16-11-2024 16:55
Static task
static1
Behavioral task
behavioral1
Sample
MinecraftInstaller.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
MinecraftInstaller.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
MinecraftInstaller.exe
Resource
macos-20241101-en
General
-
Target
MinecraftInstaller.exe
-
Size
32.3MB
-
MD5
4f02ac057355b5dc73ea28aecd2d56b4
-
SHA1
32591cb75779a3e308a44e75a76f821e7dee11e0
-
SHA256
83a5f942b2a15eab4826ef1709ec6a7f9637a7ec0fce16585776848797307fa4
-
SHA512
9eb08f85559df6af9192bec8904097d4e43a832ba9e9cc1c7be1a366af8d103c3a6db3886f00927ae5eb62055fbc770c7b5a3d2a122a0b460b51136083015368
-
SSDEEP
393216:nbekuyo9nMK50UGRXLePuq2ZWy/c5zFviMKe2OHmwv9CsTmsueFFza9ye:6Zn/G4Gqk1cWe2iTVCMue3E
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/MinecraftInstaller.exe\""1⤵PID:469
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/MinecraftInstaller.exe\""1⤵PID:469
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/MinecraftInstaller.exe1⤵PID:469
-
/bin/zsh/bin/zsh -c /Users/run/MinecraftInstaller.exe2⤵PID:470
-
-
/Users/run/MinecraftInstaller.exe/Users/run/MinecraftInstaller.exe2⤵PID:470
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:493
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:493
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:497
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:497
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:498
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:498
-
/usr/libexec/xpcproxyxpcproxy com.apple.csrutil.report1⤵PID:499
-
/usr/bin/csrutil/usr/bin/csrutil report1⤵PID:499
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
54KB
MD564f469698e53d0c828b7f90acd306082
SHA1bcc041b3849e1b0b4104ffeb46002207eeac54f3
SHA256d74d0e429343f5e1b3e0b9437e048917c4343a30cff068739ea898bad8e37ffd
SHA512a8334d1304f2fbd32cfd0ca35c289a45c450746cf3be57170cbbe87b723b1910c2e950a73c1fb82de9dc5ed623166d339a05fec3d78b861a9254dc2cb51fab5f