Analysis
-
max time kernel
50s -
max time network
151s -
platform
macos-10.15_amd64 -
resource
macos-20241106-en -
resource tags
arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
20/11/2024, 14:47
Static task
static1
Behavioral task
behavioral1
Sample
TCEQ picture 1.jpg
Resource
macos-20241106-en
0 signatures
150 seconds
General
-
Target
TCEQ picture 1.jpg
-
Size
3.2MB
-
MD5
19b683d20fdb15ac3a3eb3af6c112dc3
-
SHA1
fa067c195093b0944548d78e6b5f724ccfc3f60b
-
SHA256
451da196c4480b09e37165590274412fead4a4183063d72bb0f29888d68d764b
-
SHA512
3cec12130c7b66902250871b160eee48a2e9eeaf91f3d16d8affc9370af610df2a3ef549e47526cff6fd0f92c16b1826d0ef7a8aa4b3e915ddbb5d9d1de6cbe6
-
SSDEEP
98304:hrD8MbeC3sXXY/nb4IeP2N0ugZj3LHipbYkOq0r:hEMbeUsnY/nbBeP2mZD7/kOV
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/TCEQ picture 1.jpg\""1⤵PID:476
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/TCEQ picture 1.jpg\""1⤵PID:476
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/TCEQ picture 1.jpg"1⤵PID:476
-
/bin/zsh/bin/zsh -c "/Users/run/TCEQ picture 1.jpg"2⤵PID:478
-
-
/Users/run/TCEQ/Users/run/TCEQ picture 1.jpg2⤵PID:478
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.PerformanceAnalysis.animationperfd1⤵PID:503
-
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd1⤵PID:503