Analysis

  • max time kernel
    46s
  • max time network
    155s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241106-en
  • resource tags

    arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    17/02/2025, 18:06

General

  • Target

    Macos-Malware-Samples-main/0d64705a29367ad7044ac351367a0d6791acead7a533c2c3e1e333bf48c42693

  • Size

    6.2MB

  • MD5

    6f0ff5c0046da3c4fef9135d006b3ea6

  • SHA1

    40719a770a7f5ab6684bd3e3e86fd43ad4877a46

  • SHA256

    0d64705a29367ad7044ac351367a0d6791acead7a533c2c3e1e333bf48c42693

  • SHA512

    51f414ab165b644305c0371b8c9ece1f2da6e825398ee3f9707b8c64470dd9d7e096c978134441152b549c9747f1f9f92710d7889e490ae0c1774475e2f1973c

  • SSDEEP

    98304:Z1FcP/BRBqi2qQ0sKvqWYeJlkjdovos3Qm4BNxKbxB+:aP/T3Qm+

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Macos-Malware-Samples-main/0d64705a29367ad7044ac351367a0d6791acead7a533c2c3e1e333bf48c42693\""
    1⤵
      PID:482
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Macos-Malware-Samples-main/0d64705a29367ad7044ac351367a0d6791acead7a533c2c3e1e333bf48c42693\""
      1⤵
        PID:482
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/Macos-Malware-Samples-main/0d64705a29367ad7044ac351367a0d6791acead7a533c2c3e1e333bf48c42693
        1⤵
          PID:482
          • /bin/zsh
            /bin/zsh -c /Users/run/Macos-Malware-Samples-main/0d64705a29367ad7044ac351367a0d6791acead7a533c2c3e1e333bf48c42693
            2⤵
              PID:483
            • /Users/run/Macos-Malware-Samples-main/0d64705a29367ad7044ac351367a0d6791acead7a533c2c3e1e333bf48c42693
              /Users/run/Macos-Malware-Samples-main/0d64705a29367ad7044ac351367a0d6791acead7a533c2c3e1e333bf48c42693
              2⤵
                PID:483
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.nsurlstoraged
              1⤵
                PID:487
              • /usr/libexec/nsurlstoraged
                /usr/libexec/nsurlstoraged --privileged
                1⤵
                  PID:487

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                • /var/db/nsurlstoraged/dafsaData.bin

                  Filesize

                  54KB

                  MD5

                  64f469698e53d0c828b7f90acd306082

                  SHA1

                  bcc041b3849e1b0b4104ffeb46002207eeac54f3

                  SHA256

                  d74d0e429343f5e1b3e0b9437e048917c4343a30cff068739ea898bad8e37ffd

                  SHA512

                  a8334d1304f2fbd32cfd0ca35c289a45c450746cf3be57170cbbe87b723b1910c2e950a73c1fb82de9dc5ed623166d339a05fec3d78b861a9254dc2cb51fab5f