Resubmissions
23-02-2025 20:32
250223-zbmdnsvqcz 1021-02-2025 23:07
250221-23yxwssrem 1021-02-2025 18:31
250221-w6dhgaxpbk 10Analysis
-
max time kernel
48s -
max time network
124s -
platform
macos-10.15_amd64 -
resource
macos-20241101-en -
resource tags
arch:amd64arch:i386image:macos-20241101-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
23-02-2025 20:32
Static task
static1
Behavioral task
behavioral1
Sample
1161b525009e7448837a658eecc04275.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
1161b525009e7448837a658eecc04275.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral3
Sample
1161b525009e7448837a658eecc04275.exe
Resource
macos-20241101-en
General
-
Target
1161b525009e7448837a658eecc04275.exe
-
Size
576KB
-
MD5
1161b525009e7448837a658eecc04275
-
SHA1
2cad4c2f589760f6ae6830acb122a9d5eb9c66de
-
SHA256
7b9c9e71110c3980f1803a7438f507eadea9b078e59a61d551e21e1cae8ad5e5
-
SHA512
c85c524a09fc182b3472405b22372c2d6350b2df199d21805980d26215fc5ad075c41b5fdf371c3ddc85e5930e745426f21f0c7d50aa8c7114b2d3fb9451d034
-
SSDEEP
12288:9xgmj7oTFHFO1ZhzfQiCwxRyOTBfdgZUxX18:75oTFHU1H5CwxRyu/xl
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/1161b525009e7448837a658eecc04275.exe\""1⤵PID:473
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/1161b525009e7448837a658eecc04275.exe\""1⤵PID:473
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/1161b525009e7448837a658eecc04275.exe1⤵PID:473
-
/bin/zsh/bin/zsh -c /Users/run/1161b525009e7448837a658eecc04275.exe2⤵PID:476
-
-
/Users/run/1161b525009e7448837a658eecc04275.exe/Users/run/1161b525009e7448837a658eecc04275.exe2⤵PID:476
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:484
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:484