Resubmissions

28/03/2025, 16:42

250328-t7vr2ayvhv 7

28/03/2025, 16:40

250328-t61lwszrs5 7

Analysis

  • max time kernel
    70s
  • max time network
    109s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241106-en
  • resource tags

    arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    28/03/2025, 16:40

General

  • Target

    $PLUGINSDIR/nsProcess.dll

  • Size

    14KB

  • MD5

    10e47e822b85d2a12fa4727001612182

  • SHA1

    12826a0cc7103e13f9be20a00ecc2c0fc995d2d5

  • SHA256

    d530589a90918334b8e08d7355630892dd62f41333d948a860735d5becfcb391

  • SHA512

    1ca0fa5d3727c23bdf5cf3123bc784070a93982e11e3fd1a875712ee3422730c0fba54a121aa814585466ba837f8122bc72b39c08de07d8ad369ced5155955f7

  • SSDEEP

    192:jUl64IGsjBIYiYF8tO7zBNUjgA5K+o/y2sE9jBF0NyAa53Ug:QZwIYiPWBNUkAM+o/8E9VF0NyD9Ug

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/\$PLUGINSDIR/nsProcess.dll\""
    1⤵
      PID:463
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/\$PLUGINSDIR/nsProcess.dll\""
      1⤵
        PID:463
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run//nsProcess.dll
        1⤵
          PID:463
          • /bin/zsh
            /bin/zsh -c /Users/run//nsProcess.dll
            2⤵
              PID:464
            • /Users/run//nsProcess.dll
              /Users/run//nsProcess.dll
              2⤵
                PID:464

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads