c56c00ca3f42026f17affef76b3752f268d1498f862b3143985ca7c1d33feb39 | Triage

Resubmissions

21-01-2025 13:35

250121-qvptgawqbk 10

21-01-2025 11:58

250121-n5b91ssqem 10

21-01-2025 11:44

250121-nwlr4a1qhs 10

21-01-2025 11:07

250121-m7zbws1kfn 10

17-07-2024 20:08

240717-ywvp4swhjk 10

Analysis

max time kernel
68s
max time network
251s
platform
macos-10.15_amd64
resource
macos-20241101-en
resource tags

arch:amd64arch:i386image:macos-20241101-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
21-01-2025 11:58

Sharing

Report Analysis Logs

General

Target

DHL_PT563857935689275783656385FV-GDS3535353.bat
Size

6KB
MD5

60186cd9a2e82835bc143c1fb4662b7e
SHA1

880c7f14743f9759b30bcc28085949122f54c20e
SHA256

b66081b0e5dfe21e03d1043700d7c05e65bda96ad33a6370c374217d5ae84405
SHA512

98ca66c502178601cf1d568fb4b5ef122564f548eae2c82c9979207ea69398212f2b35571f3cc0696ec9edb70174a016c00ddd12fc26140d63196188e6f0f8b7
SSDEEP

192:jOJVeUYLAKLt+IS0y+80TJco4Ga5y0p8te:QeAKZZS280FL3aw0aE

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/DHL_PT563857935689275783656385FV-GDS3535353.bat\""
1⤵
PID:487

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/DHL_PT563857935689275783656385FV-GDS3535353.bat\""
1⤵
PID:487

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/DHL_PT563857935689275783656385FV-GDS3535353.bat
1⤵
PID:487
- /bin/zsh
  /bin/zsh -c /Users/run/DHL_PT563857935689275783656385FV-GDS3535353.bat
  2⤵
  PID:488
- /Users/run/DHL_PT563857935689275783656385FV-GDS3535353.bat
  /Users/run/DHL_PT563857935689275783656385FV-GDS3535353.bat
  2⤵
  PID:488
- /bin/sh
  sh /Users/run/DHL_PT563857935689275783656385FV-GDS3535353.bat
  2⤵
  PID:488
- /bin/bash
  sh /Users/run/DHL_PT563857935689275783656385FV-GDS3535353.bat
  2⤵
  PID:488

/usr/libexec/xpcproxy
xpcproxy com.apple.secinitd
1⤵
PID:498

/usr/libexec/secinitd
/usr/libexec/secinitd
1⤵
PID:498

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:499

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:499

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:500

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:500

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:503

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:503

/usr/libexec/xpcproxy
xpcproxy com.apple.nsurlstoraged
1⤵
PID:510

/usr/libexec/nsurlstoraged
/usr/libexec/nsurlstoraged --privileged
1⤵
PID:510

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit