144778790d4a43a1d93dff6b660a6acb3a6d37a19e6a6f0a6bf1ef47e919648e | Triage

Analysis

max time kernel
82s
max time network
143s
platform
macos-10.15_amd64
resource
macos-20241106-en
resource tags

arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
02/02/2025, 19:28

Sharing

Report Analysis Logs

General

Target

LenovoSafeBox455.apk
Size

927KB
MD5

02297e27886d758b1f6892b5047ff9ff
SHA1

bf03f835c42a8734d9d862741a235ea3491036ea
SHA256

e0a9bdf5dc4481d913038e6509635b12d12016e820ecc58a5971be3bb72dcb2b
SHA512

d9784281450f91cc32b4feadc0dbf8d76b10bbcf35e7dcd362bc940103317b4e8fafba9fa9dbe0b954d20478d700b92df4f661f53edc6022d67f3bcd85276c8d
SSDEEP

24576:wtMiI2b4apsiko9W8C/2htK3JdFgdXlQ53RJ3J:5iD5pUoW8e0tqVgdXGhJ

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/LenovoSafeBox455.apk\""
1⤵
PID:458

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/LenovoSafeBox455.apk\""
1⤵
PID:458

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/LenovoSafeBox455.apk
1⤵
PID:458
- /bin/zsh
  /bin/zsh -c /Users/run/LenovoSafeBox455.apk
  2⤵
  PID:460
- /Users/run/LenovoSafeBox455.apk
  /Users/run/LenovoSafeBox455.apk
  2⤵
  PID:460

/usr/libexec/xpcproxy
xpcproxy com.apple.nsurlstoraged
1⤵
PID:488

/usr/libexec/nsurlstoraged
/usr/libexec/nsurlstoraged --privileged
1⤵
PID:488

/usr/libexec/xpcproxy
xpcproxy com.apple.newsyslog
1⤵
PID:491

/usr/sbin/newsyslog
/usr/sbin/newsyslog
1⤵
PID:491

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/var/db/nsurlstoraged/dafsaData.bin

Filesize
54KB

MD5
64f469698e53d0c828b7f90acd306082

SHA1
bcc041b3849e1b0b4104ffeb46002207eeac54f3

SHA256
d74d0e429343f5e1b3e0b9437e048917c4343a30cff068739ea898bad8e37ffd

SHA512
a8334d1304f2fbd32cfd0ca35c289a45c450746cf3be57170cbbe87b723b1910c2e950a73c1fb82de9dc5ed623166d339a05fec3d78b861a9254dc2cb51fab5f

Download Submit