037289c207c8e229d728f247c2d7eb1459fb4413fcd4fe662f74c711169a1e08

Submit
Reports

Overview

overview

Static

static

void/0394b...43.exe

windows7-x64

void/0394b...43.exe

windows10-2004-x64

void/0aa21...0f.elf

ubuntu-24.04-amd64

void/250bb...13.exe

windows7-x64

void/250bb...13.exe

windows10-2004-x64

void/257ff...b4.exe

windows7-x64

void/257ff...b4.exe

windows10-2004-x64

void/37208...92.elf

debian-9-mips

void/43958...0d.exe

windows7-x64

void/43958...0d.exe

windows10-2004-x64

void/469a3...1b.ps1

windows7-x64

void/469a3...1b.ps1

windows10-2004-x64

void/5a099...8b.exe

windows7-x64

void/5a099...8b.exe

windows10-2004-x64

void/72cb9...de.elf

ubuntu-22.04-amd64

void/73055...90.exe

windows7-x64

void/73055...90.exe

windows10-2004-x64

การ�...��.exe

windows7-x64

การ�...��.exe

windows10-2004-x64

void/7ac64...d2.exe

windows7-x64

void/7ac64...d2.exe

windows10-2004-x64

void/7b380...cc.dmg

macos-10.15-amd64

Brew/Brew

macos-10.15-amd64

void/7dec8...a.html

windows7-x64

void/7dec8...a.html

windows10-2004-x64

void/80e6e...e3.exe

windows7-x64

void/80e6e...e3.exe

windows10-2004-x64

void/82231...6b.exe

windows7-x64

void/82231...6b.exe

windows10-2004-x64

void/8732e...71.exe

windows7-x64

void/8732e...71.exe

windows10-2004-x64

void/8c55a...97.elf

debian-9-mipsel

Analysis

max time kernel
57s
max time network
55s
platform
macos-10.15_amd64
resource
macos-20241101-en
resource tags

arch:amd64arch:i386image:macos-20241101-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
20/03/2025, 20:10

Sharing

Copy URL

Twitter E-mail

Static task

static1

11 signatures

Behavioral task

behavioral1

Sample

void/0394b475234ecc6f752ecdd9f7e5ea28cebe404e5db6a8cf2f9019915c4ddf43.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

60 seconds

Behavioral task

behavioral2

Sample

void/0394b475234ecc6f752ecdd9f7e5ea28cebe404e5db6a8cf2f9019915c4ddf43.exe

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

1 signatures

60 seconds

Behavioral task

behavioral3

Sample

void/0aa210086ab837dea1a26dd45a661f7f78ea90d243c6fad74cd4772325bff20f.elf

Resource

ubuntu2404-amd64-20250307-en

ubuntu-24.04-amd64

0 signatures

60 seconds

Behavioral task

behavioral4

Sample

void/250bb552893533d2e47ca18faa6f3026495d47bae799046c07749726f2f9c213.exe

Resource

win7-20241010-en

collection discovery

windows7-x64

12 signatures

60 seconds

Behavioral task

behavioral5

Sample

void/250bb552893533d2e47ca18faa6f3026495d47bae799046c07749726f2f9c213.exe

Resource

win10v2004-20250314-en

collection discovery

windows10-2004-x64

12 signatures

60 seconds

Behavioral task

behavioral6

Sample

void/257ffa778469d570082f7cfff1ad199a9bffffc278e9c012bea17d02393b95b4.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

60 seconds

Behavioral task

behavioral7

Sample

void/257ffa778469d570082f7cfff1ad199a9bffffc278e9c012bea17d02393b95b4.exe

Resource

win10v2004-20250314-en

execution

windows10-2004-x64

4 signatures

60 seconds

Behavioral task

behavioral8

Sample

void/3720875269fee71bfa7b07171bc78dfedddd95d32ecf5bd7f2ade07035c25e92.elf

Resource

debian9-mipsbe-20240611-en

debian-9-mips

0 signatures

60 seconds

Behavioral task

behavioral9

Sample

void/43958be574c6a890961e38fa91710b15261d9b388d08c2b899219886f2ab710d.exe

Resource

win7-20241023-en

vipkeylogger discovery execution keylogger stealer

windows7-x64

10 signatures

60 seconds

Behavioral task

behavioral10

Sample

void/43958be574c6a890961e38fa91710b15261d9b388d08c2b899219886f2ab710d.exe

Resource

win10v2004-20250314-en

vipkeylogger collection discovery execution keylogger stealer

windows10-2004-x64

15 signatures

60 seconds

Behavioral task

behavioral11

Sample

void/469a30082aeff1c7367a5c98d83d4230947500771e86738903a026859f870f1b.ps1

Resource

win7-20240729-en

execution

windows7-x64

6 signatures

60 seconds

Behavioral task

behavioral12

Sample

void/469a30082aeff1c7367a5c98d83d4230947500771e86738903a026859f870f1b.ps1

Resource

win10v2004-20250314-en

vipkeylogger collection discovery execution keylogger stealer

windows10-2004-x64

19 signatures

60 seconds

Behavioral task

behavioral13

Sample

void/5a099db04b83c828b23e283d7bead0eed7e6c2e415a2632d5546bf776a54ac8b.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

60 seconds

Behavioral task

behavioral14

Sample

void/5a099db04b83c828b23e283d7bead0eed7e6c2e415a2632d5546bf776a54ac8b.exe

Resource

win10v2004-20250314-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral15

Sample

void/72cb96390164439710b0ab64f8b0e211d49875a0f4ea402da22a0269794891de.elf

Resource

ubuntu2204-amd64-20250307-en

prometei_elf botnet discovery miner persistence privilege_escalation upx

ubuntu-22.04-amd64

10 signatures

60 seconds

Behavioral task

behavioral16

Sample

void/7305516a3c2ef76a10be8dc65d0de1d446ad157abd51e84a2e0f3979fc6c4490.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

60 seconds

Behavioral task

behavioral17

Sample

void/7305516a3c2ef76a10be8dc65d0de1d446ad157abd51e84a2e0f3979fc6c4490.exe

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

2 signatures

60 seconds

Behavioral task

behavioral18

Sample

การชำระเงินครั้งสุดท้าย.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

60 seconds

Behavioral task

behavioral19

Sample

การชำระเงินครั้งสุดท้าย.exe

Resource

win10v2004-20250314-en

discovery execution

windows10-2004-x64

8 signatures

60 seconds

Behavioral task

behavioral20

Sample

void/7ac644fc3b59f9ae6995a9cc57c39aee97ac89b3d25652c29c9a3269a02db2d2.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

60 seconds

Behavioral task

behavioral21

Sample

void/7ac644fc3b59f9ae6995a9cc57c39aee97ac89b3d25652c29c9a3269a02db2d2.exe

Resource

win10v2004-20250314-en

execution

windows10-2004-x64

5 signatures

60 seconds

Behavioral task

behavioral22

Sample

void/7b380357933497fe52439da94472b6cc7564fe5c852def28d4843c1a15792bcc.dmg

Resource

macos-20241101-en

macos-10.15-amd64

0 signatures

60 seconds

Behavioral task

behavioral23

Sample

Brew/Brew

Resource

macos-20241106-en

execution

macos-10.15-amd64

1 signatures

60 seconds

Behavioral task

behavioral24

Sample

void/7dec88c2ec34b8483abc44e98ec843877cc5ae88e094c90d46bbabfafdf3749a.html

Resource

win7-20250207-en

discovery

windows7-x64

5 signatures

60 seconds

Behavioral task

behavioral25

Sample

void/7dec88c2ec34b8483abc44e98ec843877cc5ae88e094c90d46bbabfafdf3749a.html

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

9 signatures

60 seconds

Behavioral task

behavioral26

Sample

void/80e6e20e66c60f7392af8f501b07f8a10893f8c426acd6bdb42ea50738e6fae3.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

60 seconds

Behavioral task

behavioral27

Sample

void/80e6e20e66c60f7392af8f501b07f8a10893f8c426acd6bdb42ea50738e6fae3.exe

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

2 signatures

60 seconds

Behavioral task

behavioral28

Sample

void/82231216bb55678a4bc192c1f0f180121ffc0a6278dcd1d6d9db8bea784ccf6b.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

60 seconds

Behavioral task

behavioral29

Sample

void/82231216bb55678a4bc192c1f0f180121ffc0a6278dcd1d6d9db8bea784ccf6b.exe

Resource

win10v2004-20250314-en

execution

windows10-2004-x64

5 signatures

60 seconds

Behavioral task

behavioral30

Sample

void/8732ecc7dd6bb49a644d7ca3edadd316657b2508a013da09db0f5b3c5c036c71.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

60 seconds

Behavioral task

behavioral31

Sample

void/8732ecc7dd6bb49a644d7ca3edadd316657b2508a013da09db0f5b3c5c036c71.exe

Resource

win10v2004-20250314-en

execution

windows10-2004-x64

5 signatures

60 seconds

Behavioral task

behavioral32

Sample

void/8c55a86afc661db10bbe1a1d2ab249a5b30fc1fe4b6738ad3ed69546ea045897.elf

Resource

debian9-mipsel-20240611-en

discovery

debian-9-mipsel

3 signatures

60 seconds

Report Analysis Logs

General

Target

void/7b380357933497fe52439da94472b6cc7564fe5c852def28d4843c1a15792bcc.dmg
Size

731KB
MD5

dd2832f4bf8f9c429f23ebb35195c791
SHA1

66692b1b7b888606f66c7eb7c501969512b3db25
SHA256

7b380357933497fe52439da94472b6cc7564fe5c852def28d4843c1a15792bcc
SHA512

1ad7518a1992fe82c6edde463457eb3ea91f606c307666fd17fd279fa223876cc7a1cc272fb24d71a154f337f91a929e23d2706718248a4d990f08935c89190d
SSDEEP

12288:wAhXJ8ZOP0q6kO3t+0fWuK7/upvm3ffFSR1JnGNg4ZVLvoHQANNogh2:wAhWOcq6kSwP71P94nkg8Va3Nog

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"open /Volumes/Brew\""
1⤵
PID:500

/bin/bash
sh -c "sudo /bin/zsh -c \"open /Volumes/Brew\""
1⤵
PID:500

/usr/bin/sudo
sudo /bin/zsh -c "open /Volumes/Brew"
1⤵
PID:500
- /bin/zsh
  /bin/zsh -c "open /Volumes/Brew"
  2⤵
  PID:501
- /usr/bin/open
  open /Volumes/Brew
  2⤵
  PID:501

/usr/libexec/xpcproxy
xpcproxy com.apple.nsurlstoraged
1⤵
PID:509

/usr/libexec/nsurlstoraged
/usr/libexec/nsurlstoraged --privileged
1⤵
PID:509

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/var/db/nsurlstoraged/dafsaData.bin

Filesize
54KB

MD5
64f469698e53d0c828b7f90acd306082

SHA1
bcc041b3849e1b0b4104ffeb46002207eeac54f3

SHA256
d74d0e429343f5e1b3e0b9437e048917c4343a30cff068739ea898bad8e37ffd

SHA512
a8334d1304f2fbd32cfd0ca35c289a45c450746cf3be57170cbbe87b723b1910c2e950a73c1fb82de9dc5ed623166d339a05fec3d78b861a9254dc2cb51fab5f

Download Submit