14335e256c1fb53f5581e775bf6910cc70c5c6306e33d54b9b3b1eb645df6ad8 | Triage

Resubmissions

17/11/2024, 22:23

241117-2a4yfazclg 3

Analysis

max time kernel
0s
max time network
103s
platform
macos-10.15_amd64
resource
macos-20241106-en
resource tags

arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
17/11/2024, 22:23

Sharing

Report Analysis Logs

General

Target

KRNL-REBORN/ScintillaNET.dll
Size

1.3MB
MD5

9166536c31f4e725e6befe85e2889a4b
SHA1

f0cd8253b7e64157d39a8dc5feb8cf7bda7e8dae
SHA256

ad0cc5a4d4a6aae06ee360339c851892b74b8a275ce89c1b48185672179f3163
SHA512

113a7b77d2d557d135470787deead744d42f8292d853e2b55074e9cb3591fd045ffd10e5c81b5c15dde55861b806363568611e591ae25dcb31cf011da7e72562
SSDEEP

24576:IJSShz305vgNF7/cOCPHPSVs4Eq+QTNX+cfQdS+2MMPishd/Ws5:ti0aNvoHqs4L95X+cfx/HGC

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/KRNL-REBORN/ScintillaNET.dll\""
1⤵
PID:479

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/KRNL-REBORN/ScintillaNET.dll\""
1⤵
PID:479

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/KRNL-REBORN/ScintillaNET.dll
1⤵
PID:479
- /bin/zsh
  /bin/zsh -c /Users/run/KRNL-REBORN/ScintillaNET.dll
  2⤵
  PID:480
- /Users/run/KRNL-REBORN/ScintillaNET.dll
  /Users/run/KRNL-REBORN/ScintillaNET.dll
  2⤵
  PID:480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads