Resubmissions

12-01-2025 08:32

250112-kfp8ssxkfk 10

12-01-2025 08:30

250112-kemraaxkbj 3

12-01-2025 08:20

250112-j8egbswqcr 10

Analysis

  • max time kernel
    358s
  • max time network
    514s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241106-en
  • resource tags

    arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    12-01-2025 08:30

General

  • Target

    JaffaCakes118_09ea877c1e3b9a921118efc98a232252.exe

  • Size

    106KB

  • MD5

    09ea877c1e3b9a921118efc98a232252

  • SHA1

    3b74efe3dfb91703c8cd1cb47b3fe7b3ca753322

  • SHA256

    1f9adedeee8d802186484412e76ad344b74b7fa29d874c7a551549db8ddbc1a8

  • SHA512

    01438c793ef612cc18054ff5581637ffea64ca35cab44a277c1334c58633c584edbe2138ec7448fc436736be9ad010974eba4db6fbbc462502db325760755a6d

  • SSDEEP

    1536:h+FDoKtniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZ:h+FDzK71QkbstyJjCKICpC72s/mlaX

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/bin/sh /f /Users/run/JaffaCakes118_09ea877c1e3b9a921118efc98a232252.exe \"KILL\"\""
    1⤵
      PID:456
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/bin/sh /f /Users/run/JaffaCakes118_09ea877c1e3b9a921118efc98a232252.exe \"KILL\"\""
      1⤵
        PID:456
      • /usr/bin/sudo
        sudo /bin/zsh -c "/bin/sh /f /Users/run/JaffaCakes118_09ea877c1e3b9a921118efc98a232252.exe KILL"
        1⤵
          PID:456
          • /bin/zsh
            /bin/zsh -c "/bin/sh /f /Users/run/JaffaCakes118_09ea877c1e3b9a921118efc98a232252.exe KILL"
            2⤵
              PID:458
            • /bin/sh
              /bin/sh /f /Users/run/JaffaCakes118_09ea877c1e3b9a921118efc98a232252.exe KILL
              2⤵
                PID:458
              • /bin/bash
                /bin/sh /f /Users/run/JaffaCakes118_09ea877c1e3b9a921118efc98a232252.exe KILL
                2⤵
                  PID:458
              • /usr/libexec/xpcproxy
                xpcproxy com.apple.nsurlstoraged
                1⤵
                  PID:488
                • /usr/libexec/nsurlstoraged
                  /usr/libexec/nsurlstoraged --privileged
                  1⤵
                    PID:488
                  • /usr/libexec/xpcproxy
                    xpcproxy com.apple.spindump
                    1⤵
                      PID:497
                    • /usr/sbin/spindump
                      /usr/sbin/spindump
                      1⤵
                        PID:497
                      • /usr/libexec/xpcproxy
                        xpcproxy com.apple.diagnosticd
                        1⤵
                          PID:498
                        • /usr/libexec/diagnosticd
                          /usr/libexec/diagnosticd
                          1⤵
                            PID:498

                          Network

                          MITRE ATT&CK Matrix

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          • /var/db/nsurlstoraged/dafsaData.bin

                            Filesize

                            54KB

                            MD5

                            64f469698e53d0c828b7f90acd306082

                            SHA1

                            bcc041b3849e1b0b4104ffeb46002207eeac54f3

                            SHA256

                            d74d0e429343f5e1b3e0b9437e048917c4343a30cff068739ea898bad8e37ffd

                            SHA512

                            a8334d1304f2fbd32cfd0ca35c289a45c450746cf3be57170cbbe87b723b1910c2e950a73c1fb82de9dc5ed623166d339a05fec3d78b861a9254dc2cb51fab5f