Analysis
-
max time kernel
165s -
max time network
240s -
platform
macos-10.15_amd64 -
resource
macos-20241106-en -
resource tags
arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
24-12-2024 22:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Bootstrapper.exe
Resource
win11-20241007-en
windows11-21h2-x64
12 signatures
300 seconds
Behavioral task
behavioral2
Sample
Bootstrapper.exe
Resource
macos-20241106-en
macos-10.15-amd64
0 signatures
300 seconds
General
-
Target
Bootstrapper.exe
-
Size
800KB
-
MD5
02c70d9d6696950c198db93b7f6a835e
-
SHA1
30231a467a49cc37768eea0f55f4bea1cbfb48e2
-
SHA256
8f2e28588f2303bd8d7a9b0c3ff6a9cb16fa93f8ddc9c5e0666a8c12d6880ee3
-
SHA512
431d9b9918553bff4f4a5bc2a5e7b7015f8ad0e2d390bb4d5264d08983372424156524ef5587b24b67d1226856fc630aaca08edc8113097e0094501b4f08efeb
-
SSDEEP
12288:qhd8cjaLXVh84wEFkW1mocaBj6WtiRPpptHxQ0z:2ycjar84w5W4ocaBj6y2tHDz
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Bootstrapper.exe\""1⤵PID:477
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Bootstrapper.exe\""1⤵PID:477
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Bootstrapper.exe1⤵PID:477
-
/bin/zsh/bin/zsh -c /Users/run/Bootstrapper.exe2⤵PID:478
-
-
/Users/run/Bootstrapper.exe/Users/run/Bootstrapper.exe2⤵PID:478
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:502
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:502