Analysis

  • max time kernel
    69s
  • max time network
    35s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241106-en
  • resource tags

    arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    21-11-2024 14:59

General

  • Target

    17725_201109110_46adea910706b40fc450f4bbb6639c416d7acbd6df62801f7c52db41d0207daf_Google Drive

  • Size

    56.7MB

  • MD5

    b3813ccc58fd81a172bfdc24298587d9

  • SHA1

    374015b78c0fdace0cca76e9e09a73a54d4c0854

  • SHA256

    46adea910706b40fc450f4bbb6639c416d7acbd6df62801f7c52db41d0207daf

  • SHA512

    db8f501807f05bf0efbe6c1c54b6f0646f0ef47e5d2518f2c25be22575934209c254a70382ef58b23c2d72bbd57b6de7e01954e7237e6770d041808a3b04ceab

  • SSDEEP

    393216:sFezZsWF0uqyY7dQLNfPe/CjsbPqFY/xktqynBSHiXUx7uEbWhlTqay:zTaj7dQLNfPenCFYAHy

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/17725_201109110_46adea910706b40fc450f4bbb6639c416d7acbd6df62801f7c52db41d0207daf_Google Drive\""
    1⤵
      PID:462
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/17725_201109110_46adea910706b40fc450f4bbb6639c416d7acbd6df62801f7c52db41d0207daf_Google Drive\""
      1⤵
        PID:462
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/17725_201109110_46adea910706b40fc450f4bbb6639c416d7acbd6df62801f7c52db41d0207daf_Google Drive"
        1⤵
          PID:462
          • /bin/zsh
            /bin/zsh -c "/Users/run/17725_201109110_46adea910706b40fc450f4bbb6639c416d7acbd6df62801f7c52db41d0207daf_Google Drive"
            2⤵
              PID:464
            • /Users/run/17725_201109110_46adea910706b40fc450f4bbb6639c416d7acbd6df62801f7c52db41d0207daf_Google
              /Users/run/17725_201109110_46adea910706b40fc450f4bbb6639c416d7acbd6df62801f7c52db41d0207daf_Google Drive
              2⤵
                PID:464

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads