Resubmissions
26/03/2025, 13:56
250326-q8qmxsxr18 625/03/2025, 16:34
250325-t3db7asnz6 425/03/2025, 16:12
250325-tnkgyssmv2 7Analysis
-
max time kernel
833s -
max time network
886s -
platform
macos-10.15_amd64 -
resource
macos-20241106-en -
resource tags
arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
25/03/2025, 16:12
Static task
static1
Behavioral task
behavioral1
Sample
FirstLogonAnim.html
Resource
win11-20250314-en
Behavioral task
behavioral2
Sample
FirstLogonAnim.html
Resource
android-33-x64-arm64-20240910-en
Behavioral task
behavioral3
Sample
FirstLogonAnim.html
Resource
macos-20241106-en
Behavioral task
behavioral4
Sample
FirstLogonAnim.html
Resource
ubuntu2404-amd64-20250307-en
General
-
Target
FirstLogonAnim.html
-
Size
101KB
-
MD5
d563f7a009fb7ac826c88dfd5cfe55d9
-
SHA1
92e3a38de7c6fae27bfb08f40c9d28780407c26f
-
SHA256
600d6151fe47eb99535638c7fed1183996d94ef603e0f8469383e058a3ed3f9f
-
SHA512
adf9f99b8419d4e1bf42be7a6128066df53d23359c319fe6ab3137811338778abaa2cb09d5411977edb9340491cc7a70a9c291fb2a2f6f8f2fb5270753903909
-
SSDEEP
768:5fDDI+fh378/tZ5vAiwf/ysFIVusFIVFDVgLRDVy18mCgLkm3y1km3gLRm3y1eDK:5bDIvwWxSAVUrhia
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/FirstLogonAnim.html\""1⤵PID:476
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/FirstLogonAnim.html\""1⤵PID:476
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/FirstLogonAnim.html1⤵PID:476
-
/bin/zsh/bin/zsh -c /Users/run/FirstLogonAnim.html2⤵PID:479
-
-
/Users/run/FirstLogonAnim.html/Users/run/FirstLogonAnim.html2⤵PID:479
-
-
/bin/shsh /Users/run/FirstLogonAnim.html2⤵PID:479
-
-
/bin/bashsh /Users/run/FirstLogonAnim.html2⤵PID:479
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:505
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:505