Resubmissions
07/07/2026, 12:33
260707-pradyahz8x807/07/2026, 12:31
260707-pp6z5aez9m121/03/2025, 14:58
250321-scamya1vew420/03/2025, 14:08
250320-rfp2csxp14820/03/2025, 13:57
250320-q9rllsxpv68Analysis
- max time kernel
753s - max time network
756s - platform
macos-10.15_amd64 - resource
macos-20241101-en - resource tags
arch:amd64arch:i386image:macos-20241101-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
21/03/2025, 14:58
Static task
static1
Behavioral task
behavioral1
Sample
MEMZ.7z
Resource
win11-20250314-en
12 signatures
900 seconds
Behavioral task
behavioral2
Sample
MEMZ.7z
Resource
macos-20241101-en
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
MEMZ.7z
Resource
debian12-armhf-20240221-en
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
MEMZ.7z
Resource
ubuntu2404-amd64-20250307-en
0 signatures
900 seconds
General
- Target MEMZ.7z
- Size 26KB
- Sample250321-scamya1vew
- SHA256 2d184aaf67d614bb106319ab1a80a5c0d8bfebd513e3fba51acf217ea527ea02
- MD5 01a6ebf12323106a7198f263e7ec8035
- SHA1 8b26cbaff6d6a51bf09d7e4666c80f8926c90034
- SHA512 eff9fb5303e9f6f602d6177dcf6f8660f18a2afc2771d1abc05fe2af7ec0a9b3e9640e1273de80b312947f7cf40431819359db95bc885aa9e13f71136d69146b
- SSDEEP 384:KvpMW/bhwnx2S9uYVWlbOpmf8lFmbFZWrZwhQ2w61VfqhcMFkq5nBhStS:KKEbtS9uYyKpmf4hr2w61Ehc9qDh
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/MEMZ.7z\""1⤵PID:450
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/MEMZ.7z\""1⤵PID:450
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/MEMZ.7z1⤵PID:450
-
/bin/zsh/bin/zsh -c /Users/run/MEMZ.7z2⤵PID:453
-
-
/Users/run/MEMZ.7z/Users/run/MEMZ.7z2⤵PID:453
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.Terminal.21001⤵PID:478
-
/System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal/System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal1⤵PID:478
-
/usr/bin/loginlogin -pf run2⤵PID:480
-
/bin/zsh-zsh3⤵PID:481
-
/usr/libexec/path_helper/usr/libexec/path_helper -s4⤵PID:482
-
-
/usr/bin/localelocale LC_CTYPE4⤵PID:483
-
-
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:485
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:485
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:492
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:492
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:493
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:493
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /var/db/nsurlstoraged/dafsaData.bin
- Size 54KB
- SHA256 d74d0e429343f5e1b3e0b9437e048917c4343a30cff068739ea898bad8e37ffd
- MD5 64f469698e53d0c828b7f90acd306082
- SHA1 bcc041b3849e1b0b4104ffeb46002207eeac54f3
- SHA512 a8334d1304f2fbd32cfd0ca35c289a45c450746cf3be57170cbbe87b723b1910c2e950a73c1fb82de9dc5ed623166d339a05fec3d78b861a9254dc2cb51fab5f
- SSDEEP 1536:aqR8qmuCC1x0Ksqvg6wxElfcskLlLf2OsM:3RxmNKOy67sM
- MD5 SHA1 SHA512 SSDEEP