Analysis

  • max time kernel
    58s
  • max time network
    73s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241101-en
  • resource tags

    arch:amd64arch:i386image:macos-20241101-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    20/03/2025, 20:07

General

  • Target

    void/7b380357933497fe52439da94472b6cc7564fe5c852def28d4843c1a15792bcc.dmg

  • Size

    731KB

  • MD5

    dd2832f4bf8f9c429f23ebb35195c791

  • SHA1

    66692b1b7b888606f66c7eb7c501969512b3db25

  • SHA256

    7b380357933497fe52439da94472b6cc7564fe5c852def28d4843c1a15792bcc

  • SHA512

    1ad7518a1992fe82c6edde463457eb3ea91f606c307666fd17fd279fa223876cc7a1cc272fb24d71a154f337f91a929e23d2706718248a4d990f08935c89190d

  • SSDEEP

    12288:wAhXJ8ZOP0q6kO3t+0fWuK7/upvm3ffFSR1JnGNg4ZVLvoHQANNogh2:wAhWOcq6kSwP71P94nkg8Va3Nog

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"open /Volumes/Brew\""
    1⤵
      PID:518
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"open /Volumes/Brew\""
      1⤵
        PID:518
      • /usr/bin/sudo
        sudo /bin/zsh -c "open /Volumes/Brew"
        1⤵
          PID:518
          • /bin/zsh
            /bin/zsh -c "open /Volumes/Brew"
            2⤵
              PID:519
            • /usr/bin/open
              open /Volumes/Brew
              2⤵
                PID:519
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.spindump
              1⤵
                PID:520
              • /usr/sbin/spindump
                /usr/sbin/spindump
                1⤵
                  PID:520
                • /usr/libexec/xpcproxy
                  xpcproxy com.apple.spindump_agent
                  1⤵
                    PID:521
                  • /usr/libexec/xpcproxy
                    xpcproxy com.apple.tailspind
                    1⤵
                      PID:522
                    • /usr/libexec/tailspind
                      /usr/libexec/tailspind
                      1⤵
                        PID:522
                      • /usr/libexec/spindump_agent
                        /usr/libexec/spindump_agent
                        1⤵
                          PID:521
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.nsurlstoraged
                          1⤵
                            PID:528
                          • /usr/libexec/nsurlstoraged
                            /usr/libexec/nsurlstoraged --privileged
                            1⤵
                              PID:528

                            Network

                            MITRE ATT&CK Matrix

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads