Analysis

  • max time kernel
    1255s
  • max time network
    1713s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241106-en
  • resource tags

    arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    14-12-2024 20:44

General

  • Target

    The-MALWARE-Repo-master/Virus/Mabezat/Mabezat.exe

  • Size

    141KB

  • MD5

    de8d08a3018dfe8fd04ed525d30bb612

  • SHA1

    a65d97c20e777d04fb4f3c465b82e8c456edba24

  • SHA256

    2ae0c4a5f1fedf964e2f8a486bf0ee5d1816aac30c889458a9ac113d13b50ceb

  • SHA512

    cc4bbf71024732addda3a30a511ce33ce41cbed2d507dfc7391e8367ddf9a5c4906a57bf8310e3f6535646f6d365835c7e49b95584d1114faf2738dcb1eb451a

  • SSDEEP

    3072:k8sjSpy0bShLy8gXvzJ9k8a/o3z4aBy5chynHa3Ifn9xJY:Fsjl0bu+NxjJBRhyHJfO

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/The-MALWARE-Repo-master/Virus/Mabezat/Mabezat.exe\""
    1⤵
      PID:480
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/The-MALWARE-Repo-master/Virus/Mabezat/Mabezat.exe\""
      1⤵
        PID:480
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/The-MALWARE-Repo-master/Virus/Mabezat/Mabezat.exe
        1⤵
          PID:480
          • /bin/zsh
            /bin/zsh -c /Users/run/The-MALWARE-Repo-master/Virus/Mabezat/Mabezat.exe
            2⤵
              PID:481
            • /Users/run/The-MALWARE-Repo-master/Virus/Mabezat/Mabezat.exe
              /Users/run/The-MALWARE-Repo-master/Virus/Mabezat/Mabezat.exe
              2⤵
                PID:481
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.nsurlstoraged
              1⤵
                PID:502
              • /usr/libexec/nsurlstoraged
                /usr/libexec/nsurlstoraged --privileged
                1⤵
                  PID:502
                • /usr/libexec/xpcproxy
                  xpcproxy com.apple.spindump
                  1⤵
                    PID:511
                  • /usr/sbin/spindump
                    /usr/sbin/spindump
                    1⤵
                      PID:511
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.diagnosticd
                      1⤵
                        PID:512
                      • /usr/libexec/diagnosticd
                        /usr/libexec/diagnosticd
                        1⤵
                          PID:512
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.newsyslog
                          1⤵
                            PID:513
                          • /usr/sbin/newsyslog
                            /usr/sbin/newsyslog
                            1⤵
                              PID:513

                            Network

                            MITRE ATT&CK Matrix

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • /var/db/nsurlstoraged/dafsaData.bin

                              Filesize

                              54KB

                              MD5

                              64f469698e53d0c828b7f90acd306082

                              SHA1

                              bcc041b3849e1b0b4104ffeb46002207eeac54f3

                              SHA256

                              d74d0e429343f5e1b3e0b9437e048917c4343a30cff068739ea898bad8e37ffd

                              SHA512

                              a8334d1304f2fbd32cfd0ca35c289a45c450746cf3be57170cbbe87b723b1910c2e950a73c1fb82de9dc5ed623166d339a05fec3d78b861a9254dc2cb51fab5f