Resubmissions

28/03/2025, 12:13

250328-pd732sv1bz 8

28/03/2025, 11:45

250328-nw5j7svyey 1

28/03/2025, 11:45

250328-nwzzqavyew 4

28/03/2025, 11:38

250328-nrxc2avycv 8

28/03/2025, 11:37

250328-nrmhtsxlt2 1

28/03/2025, 11:32

250328-nnq2vaxkz5 4

28/03/2025, 11:32

250328-nnkj3axkz4 1

28/03/2025, 11:32

250328-nnbl6axkz3 1

28/03/2025, 09:12

250328-k6mwcstye1 8

Analysis

  • max time kernel
    899s
  • max time network
    1519s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241106-en
  • resource tags

    arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    28/03/2025, 11:45

General

  • Target

    730880284326.html

  • Size

    550B

  • MD5

    60ee7118f7d5d6737e4577103711e257

  • SHA1

    df5d33bf26a9882e6e512e4803438031559cfca2

  • SHA256

    e1369268642ccda5e7b9faf8befc73e502ffddf79eda69d5189cac13a8557a63

  • SHA512

    3d4816c0e6b591fad2fdcc10a9b38ed0fb84fd62f7ad99e42e11f79e91b8776db7d0bf9eb2583bc89e0ee55e937e4dd1f39bd9f1dbc63058d104e37ec440e62a

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/730880284326.html\""
    1⤵
      PID:477
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/730880284326.html\""
      1⤵
        PID:477
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/730880284326.html
        1⤵
          PID:477
          • /bin/zsh
            /bin/zsh -c /Users/run/730880284326.html
            2⤵
              PID:479
            • /Users/run/730880284326.html
              /Users/run/730880284326.html
              2⤵
                PID:479
              • /bin/sh
                sh /Users/run/730880284326.html
                2⤵
                  PID:479
                • /bin/bash
                  sh /Users/run/730880284326.html
                  2⤵
                    PID:479
                • /usr/libexec/xpcproxy
                  xpcproxy com.apple.diagnosticd
                  1⤵
                    PID:507
                  • /usr/libexec/diagnosticd
                    /usr/libexec/diagnosticd
                    1⤵
                      PID:507
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.appleseed.seedusaged
                      1⤵
                        PID:510
                      • /System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/Library/LaunchServices/seedusaged
                        "/System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/Library/LaunchServices/seedusaged"
                        1⤵
                          PID:510

                        Network

                        MITRE ATT&CK Matrix

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads