Overview
overview
7Static
static
3picasa39-setup.exe
windows7-x64
7picasa39-setup.exe
windows10-2004-x64
7$PLUGINSDI...de.dll
windows7-x64
3$PLUGINSDI...de.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$SYSDIR/GPhotos.scr
windows7-x64
3$SYSDIR/GPhotos.scr
windows10-2004-x64
3MovieThumb.exe
windows7-x64
3MovieThumb.exe
windows10-2004-x64
3Picasa3.exe
windows7-x64
3Picasa3.exe
windows10-2004-x64
3Picasa3i18n.dll
windows7-x64
3Picasa3i18n.dll
windows10-2004-x64
3PicasaPhotoViewer.exe
windows7-x64
3PicasaPhotoViewer.exe
windows10-2004-x64
3cdautorun/...sa.url
windows7-x64
1cdautorun/...sa.url
windows10-2004-x64
1cdautorun/...pector
macos-10.15-amd64
4cdautorun/...urces/
macos-10.15-amd64
1cdautorun/...deshow
macos-10.15-amd64
1cdautorun/...pector
macos-10.15-amd64
4cdautorun/.../Repor
macos-10.15-amd64
4cdautorun/...estore
macos-10.15-amd64
1cdautorun/...ts.ps1
windows7-x64
3cdautorun/...ts.ps1
windows10-2004-x64
3cdautorun/...CD.exe
windows7-x64
3cdautorun/...CD.exe
windows10-2004-x64
3Analysis
-
max time kernel
17s -
max time network
103s -
platform
macos-10.15_amd64 -
resource
macos-20241106-en -
resource tags
arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
25-11-2024 11:19
Static task
static1
Behavioral task
behavioral1
Sample
picasa39-setup.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
picasa39-setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSIS_Picasa_Unicode.dll
Resource
win7-20241023-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSIS_Picasa_Unicode.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
$SYSDIR/GPhotos.scr
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
$SYSDIR/GPhotos.scr
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
MovieThumb.exe
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
MovieThumb.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Picasa3.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Picasa3.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Picasa3i18n.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Picasa3i18n.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
PicasaPhotoViewer.exe
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
PicasaPhotoViewer.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
cdautorun/Download Picasa.url
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
cdautorun/Download Picasa.url
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Inspector
Resource
macos-20241101-en
Behavioral task
behavioral24
Sample
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/
Resource
macos-20241106-en
Behavioral task
behavioral25
Sample
cdautorun/Picasa CD Slideshow.app/Contents/MacOS/Picasa CD Slideshow
Resource
macos-20241101-en
Behavioral task
behavioral26
Sample
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Inspector
Resource
macos-20241106-en
Behavioral task
behavioral27
Sample
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Repor
Resource
macos-20241106-en
Behavioral task
behavioral28
Sample
cdautorun/Picasa Restore.app/Contents/MacOS/Picasa Restore
Resource
macos-20241101-en
Behavioral task
behavioral29
Sample
cdautorun/Picasa Restore.app/Contents/Resources/sv.lproj/PRMainMenu.nib/keyedobjects.ps1
Resource
win7-20241010-en
Behavioral task
behavioral30
Sample
cdautorun/Picasa Restore.app/Contents/Resources/sv.lproj/PRMainMenu.nib/keyedobjects.ps1
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
cdautorun/PicasaCD.exe
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
cdautorun/PicasaCD.exe
Resource
win10v2004-20241007-en
General
-
Target
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/
-
Size
89KB
-
MD5
df5a8247b6a561ecd330bcdc0644a674
-
SHA1
ea83636bc0af94f179dd9884650131529aa3e69f
-
SHA256
20ca80f33ec6adb69ad3f2fa721dfab4e848c3baf6ada434c040228bc2f46a6c
-
SHA512
0503e22366ec17ff522ccb83649873e8a162aea720baa3615784c162fbc617e81d3833b35c93685eed27a750bc60bf13b1778681d076d61dfb24413ad3b5c019
-
SSDEEP
768:f3AM5SGsUB0M+DWn7d8qze8FNJrEWniUfIkhLQPbocdHB6jbZIb4N09:fBqW7qpG/nzhLQP1vJb4W9
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources\""1⤵PID:479
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources\""1⤵PID:479
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources"1⤵PID:479
-
/bin/zsh/bin/zsh -c "/Users/run/cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources"2⤵PID:481
-
-
/Users/run/cdautorun/Picasa/Users/run/cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources2⤵PID:481
-