Overview

overview

4

Static

static

3

setup.exe

macos-10.15-amd64

4

$PLUGINSDI...er.dll

macos-10.15-amd64

1

$PLUGINSDI...LL.dll

macos-10.15-amd64

4

$PLUGINSDI...LL.dll

macos-10.15-amd64

4

$PLUGINSDI...LS.dll

macos-10.15-amd64

1

$PLUGINSDI...64.exe

macos-10.15-amd64

$PLUGINSDI...64.exe

macos-10.15-amd64

1

$PLUGINSDI...64.sys

macos-10.15-amd64

4

$PLUGINSDI...64.exe

macos-10.15-amd64

4

$PLUGINSDI...64.exe

macos-10.15-amd64

4

$PLUGINSDI...2k.sys

macos-10.15-amd64

1

$PLUGINSDI...xp.sys

macos-10.15-amd64

1

$PLUGINSDI...2k.sys

macos-10.15-amd64

1

$PLUGINSDI...px.dll

macos-10.15-amd64

4

$PLUGINSDI...fs.dll

macos-10.15-amd64

4

$PLUGINSDI...rv.dll

macos-10.15-amd64

4

$PLUGINSDI...20.sys

macos-10.15-amd64

1

$PLUGINSDI...er.sys

macos-10.15-amd64

1

$PLUGINSDI...st.exe

macos-10.15-amd64

1

$PLUGINSDI...as.dll

macos-10.15-amd64

4

$PLUGINSDI...up.exe

macos-10.15-amd64

1

$PLUGINSDI...fs.dll

macos-10.15-amd64

4

$PLUGINSDI...ve.dll

macos-10.15-amd64

1

Plugins/Re...is.dll

macos-10.15-amd64

4

Plugins/dsp_sps.dll

macos-10.15-amd64

1

Plugins/en...ac.dll

macos-10.15-amd64

4

Plugins/enc_flac.dll

macos-10.15-amd64

1

Plugins/enc_lame.dll

macos-10.15-amd64

1

Plugins/en...is.dll

macos-10.15-amd64

Plugins/enc_wav.dll

macos-10.15-amd64

1

Plugins/enc_wma.dll

macos-10.15-amd64

4

Plugins/fr...pe.dll

macos-10.15-amd64

4

Analysis

  • max time kernel
    77s
  • max time network
    125s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240611-en
  • resource tags

    arch:amd64arch:i386image:macos-20240611-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    04-07-2024 14:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $PLUGINSDIR/PrimoRedist/pxhelp20.sys

  • Size

    44KB

  • MD5

    e42e3433dbb4cffe8fdd91eab29aea8e

  • SHA1

    6f764c5e20eecd6f3d4154d9d89d2420dd783470

  • SHA256

    20abd8372b242fd356ac143e7eb56f93cfea4988ed1b0c4434cb64c387d7f66c

  • SHA512

    260a2104aef64fd5a276e289e1cbe37502583e94039af41a3803f1c464d78c72def4e911f14312b94c63b28b1f6792a7bd10f23db837daf5a1a9ffd478c40810

  • SSDEEP

    768:UD8M77TDwgA0BdpVVIC8X4tzQq2edfEVxAyDiypP+TsZ0I8V8/L+HbmpmF:Ux73E0/iQz12asV5VUsWI8o0mIF

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/\$PLUGINSDIR/PrimoRedist/pxhelp20.sys\""
    1⤵
      PID:535
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/\$PLUGINSDIR/PrimoRedist/pxhelp20.sys\""
      1⤵
        PID:535
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run//PrimoRedist/pxhelp20.sys
        1⤵
          PID:535
          • /bin/zsh
            /bin/zsh -c /Users/run//PrimoRedist/pxhelp20.sys
            2⤵
              PID:536
            • /Users/run//PrimoRedist/pxhelp20.sys
              /Users/run//PrimoRedist/pxhelp20.sys
              2⤵
                PID:536
            • /usr/bin/pluginkit
              /usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync
              1⤵
                PID:605
              • /usr/sbin/spctl
                /usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdaterBCBF2C69/OneDrive.app
                1⤵
                  PID:606

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads