| URL: | https://apps.apple.com/us/app/dropbox-cloud-photo-storage/id327630330 |
| Full analysis: | https://app.any.run/tasks/a31ae90a-266f-41fa-b900-376decf6894c |
| Verdict: | Malicious activity |
| Analysis date: | May 27, 2024, 05:39:13 |
| OS: | Ubuntu 22.04.2 |
| MD5: | B85EB1C1ECEF6BB31FB754AF7A43B78C |
| SHA1: | C6AF9A5566A33AAA38B138BE3F659EE61F5A5279 |
| SHA256: | 31270F26730C4B06A5B8DCF62B85EEEAC5DE64C3EA3F5103E314ED9BAD0368E1 |
| SSDEEP: | 3:N8aF/JAZgNjkmNW8KrRKULgXgMV:2akZg9kmN3ahgXgU |
PID | CMD | Path | Indicators | Parent process |
|---|---|---|---|---|
| 6167 | /bin/sh -c "DISPLAY=:0 sudo -iu user google-chrome https://apps\.apple\.com/us/app/dropbox-cloud-photo-storage/id327630330 " | /bin/sh | — | any-guest-agent |
User: user Integrity Level: UNKNOWN | ||||
| 6168 | sudo -iu user google-chrome https://apps.apple.com/us/app/dropbox-cloud-photo-storage/id327630330 | /usr/bin/sudo | — | sh |
User: user Integrity Level: UNKNOWN | ||||
| 6169 | /usr/bin/google-chrome https://apps.apple.com/us/app/dropbox-cloud-photo-storage/id327630330 | /opt/google/chrome/chrome | sudo | |
User: user Integrity Level: UNKNOWN | ||||
| 6170 | /usr/bin/locale-check C.UTF-8 | /usr/bin/locale-check | — | chrome |
User: user Integrity Level: UNKNOWN Exit code: 0 | ||||
| 6171 | readlink -f /usr/bin/google-chrome | /usr/bin/readlink | — | chrome |
User: user Integrity Level: UNKNOWN Exit code: 0 | ||||
| 6172 | dirname /opt/google/chrome/google-chrome | /usr/bin/dirname | — | chrome |
User: user Integrity Level: UNKNOWN Exit code: 0 | ||||
| 6173 | mkdir -p /home/user/.local/share/applications | /usr/bin/mkdir | — | chrome |
User: user Integrity Level: UNKNOWN Exit code: 0 | ||||
| 6174 | cat | /usr/bin/cat | — | chrome |
User: user Integrity Level: UNKNOWN | ||||
| 6175 | cat | /usr/bin/cat | — | chrome |
User: user Integrity Level: UNKNOWN | ||||
| 6176 | /opt/google/chrome/chrome | — | chrome | |
User: user Integrity Level: UNKNOWN Exit code: 0 | ||||
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 6169 | chrome | /proc/6169/fd/63 | — | |
MD5:— | SHA256:— | |||
| 6169 | chrome | /dev/shm/.com.google.Chrome.1e6UQ6 | — | |
MD5:— | SHA256:— | |||
| 6169 | chrome | /dev/shm/.com.google.Chrome.2Ei05t | — | |
MD5:— | SHA256:— | |||
| 6169 | chrome | /dev/shm/.com.google.Chrome.QLH1tU | — | |
MD5:— | SHA256:— | |||
| 6169 | chrome | /dev/shm/.com.google.Chrome.SzJUBp | — | |
MD5:— | SHA256:— | |||
| 6169 | chrome | /dev/shm/.com.google.Chrome.rZxbKI | — | |
MD5:— | SHA256:— | |||
| 6169 | chrome | /dev/shm/.com.google.Chrome.dMK9gb | — | |
MD5:— | SHA256:— | |||
| 6169 | chrome | /dev/shm/.com.google.Chrome.yQDmDk | — | |
MD5:— | SHA256:— | |||
| 6169 | chrome | /home/user/.config/google-chrome/Default/Sync Data/LevelDB/LOG | — | |
MD5:— | SHA256:— | |||
| 6169 | chrome | /dev/shm/.com.google.Chrome.ycQ9Pa | — | |
MD5:— | SHA256:— | |||
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 212.102.56.182:443 | — | Datacamp Limited | DE | unknown |
470 | avahi-daemon | 224.0.0.251:5353 | — | — | — | unknown |
6169 | chrome | 239.255.255.250:1900 | — | — | — | unknown |
6214 | chrome | 66.102.1.84:443 | accounts.google.com | GOOGLE | US | unknown |
6214 | chrome | 172.217.18.3:443 | clientservices.googleapis.com | GOOGLE | US | whitelisted |
6214 | chrome | 2.19.57.224:443 | apps.apple.com | AKAMAI-AS | GB | unknown |
6214 | chrome | 23.32.156.244:443 | www.apple.com | AKAMAI-AS | US | unknown |
6214 | chrome | 23.14.76.95:443 | js-cdn.music.apple.com | AKAMAI-AS | CL | unknown |
6214 | chrome | 23.216.154.179:443 | amp-api-edge.apps.apple.com | Akamai International B.V. | IE | unknown |
6214 | chrome | 2.19.56.104:443 | xp.apple.com | AKAMAI-AS | GB | unknown |
Domain | IP | Reputation |
|---|---|---|
clientservices.googleapis.com |
| whitelisted |
accounts.google.com |
| shared |
apps.apple.com |
| whitelisted |
e673.dsce9.akamaiedge.net |
| unknown |
www.apple.com |
| whitelisted |
js-cdn.music.apple.com |
| whitelisted |
amp-api-edge.apps.apple.com |
| unknown |
is1-ssl.mzstatic.com |
| whitelisted |
is2-ssl.mzstatic.com |
| whitelisted |
e8143.dscb.akamaiedge.net |
| unknown |