Analysis

  • max time kernel
    165s
  • max time network
    240s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241106-en
  • resource tags

    arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    24-12-2024 22:32

General

  • Target

    Bootstrapper.exe

  • Size

    800KB

  • MD5

    02c70d9d6696950c198db93b7f6a835e

  • SHA1

    30231a467a49cc37768eea0f55f4bea1cbfb48e2

  • SHA256

    8f2e28588f2303bd8d7a9b0c3ff6a9cb16fa93f8ddc9c5e0666a8c12d6880ee3

  • SHA512

    431d9b9918553bff4f4a5bc2a5e7b7015f8ad0e2d390bb4d5264d08983372424156524ef5587b24b67d1226856fc630aaca08edc8113097e0094501b4f08efeb

  • SSDEEP

    12288:qhd8cjaLXVh84wEFkW1mocaBj6WtiRPpptHxQ0z:2ycjar84w5W4ocaBj6y2tHDz

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Bootstrapper.exe\""
    1⤵
      PID:477
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Bootstrapper.exe\""
      1⤵
        PID:477
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/Bootstrapper.exe
        1⤵
          PID:477
          • /bin/zsh
            /bin/zsh -c /Users/run/Bootstrapper.exe
            2⤵
              PID:478
            • /Users/run/Bootstrapper.exe
              /Users/run/Bootstrapper.exe
              2⤵
                PID:478
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.diagnosticd
              1⤵
                PID:502
              • /usr/libexec/diagnosticd
                /usr/libexec/diagnosticd
                1⤵
                  PID:502

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads