Analysis

  • max time kernel
    84s
  • max time network
    125s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241106-en
  • resource tags

    arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    22/12/2024, 19:30

General

  • Target

    Payload/CapCut.app/PlugIns/ShareExtension.appex/ShareExtension

  • Size

    171KB

  • MD5

    366d1dd0398fe8b93263a1c5de7552b5

  • SHA1

    45a541d93f1667b154d24f8f110b849b29ceb840

  • SHA256

    1c4d989771b7c4a5feeed016539d3d8a49e7b0d421f15c17954f49ae8d99fdf4

  • SHA512

    33b428a656e93e03f486dbb129318edd114ba30825cf16c55f05366c2dfb0779f9c941231e0935f0684cf30da72d70e90d534aafbe414a0faa01808af0f9b9cc

  • SSDEEP

    1536:pMhcxyUigUq9V7pzROEowIgs0CNoi0kldCI4zWyLDiELXSPyFJJUtDJiWJ8XJk+:p/pP7Zx4eh3wEZk7Z/OENpsRCNbZs

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Payload/CapCut.app/PlugIns/ShareExtension.appex/ShareExtension\""
    1⤵
      PID:488
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Payload/CapCut.app/PlugIns/ShareExtension.appex/ShareExtension\""
      1⤵
        PID:488
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/Payload/CapCut.app/PlugIns/ShareExtension.appex/ShareExtension
        1⤵
          PID:488
          • /bin/zsh
            /bin/zsh -c /Users/run/Payload/CapCut.app/PlugIns/ShareExtension.appex/ShareExtension
            2⤵
              PID:489
            • /Users/run/Payload/CapCut.app/PlugIns/ShareExtension.appex/ShareExtension
              /Users/run/Payload/CapCut.app/PlugIns/ShareExtension.appex/ShareExtension
              2⤵
                PID:489

            Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads