Analysis

  • max time kernel
    140s
  • max time network
    186s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241101-en
  • resource tags

    arch:amd64arch:i386image:macos-20241101-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    17/02/2025, 18:06

General

  • Target

    Macos-Malware-Samples-main/0ce3e6c13d79452560a88c667063a48392e9fc8a54b90afab3f8f9aa02997f4e

  • Size

    509KB

  • MD5

    a8c4afdc10568eb7c91f6c6020ee4b3f

  • SHA1

    d43b3a0f6b1d9006fd9e303de3272d88ecd54896

  • SHA256

    0ce3e6c13d79452560a88c667063a48392e9fc8a54b90afab3f8f9aa02997f4e

  • SHA512

    0a758bb77d4bda9864e87d91841ccd205262e37fd80f4cc9bb695e0a73140baa39b9e7bf78c80abec6cccb8f0bfe1fd4d7d7af3d79f2faaf64be6a7726601a32

  • SSDEEP

    12288:HIJRoWq180jm38YAKmpwOFNOvEVQOIu185rCW+wnfBoaD/:goKB8YAKmxFIiQu185rCW+wnf

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Macos-Malware-Samples-main/0ce3e6c13d79452560a88c667063a48392e9fc8a54b90afab3f8f9aa02997f4e\""
    1⤵
      PID:502
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Macos-Malware-Samples-main/0ce3e6c13d79452560a88c667063a48392e9fc8a54b90afab3f8f9aa02997f4e\""
      1⤵
        PID:502
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/Macos-Malware-Samples-main/0ce3e6c13d79452560a88c667063a48392e9fc8a54b90afab3f8f9aa02997f4e
        1⤵
          PID:502
          • /bin/zsh
            /bin/zsh -c /Users/run/Macos-Malware-Samples-main/0ce3e6c13d79452560a88c667063a48392e9fc8a54b90afab3f8f9aa02997f4e
            2⤵
              PID:503
            • /Users/run/Macos-Malware-Samples-main/0ce3e6c13d79452560a88c667063a48392e9fc8a54b90afab3f8f9aa02997f4e
              /Users/run/Macos-Malware-Samples-main/0ce3e6c13d79452560a88c667063a48392e9fc8a54b90afab3f8f9aa02997f4e
              2⤵
                PID:503
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.nsurlstoraged
              1⤵
                PID:504
              • /usr/libexec/nsurlstoraged
                /usr/libexec/nsurlstoraged --privileged
                1⤵
                  PID:504

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads