Automated Malware Analysis IOC Report for

Details

Name:	https://iterm2.com/documentation-csiu.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	http://iterm2.com/captured_output.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/bugsReport
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://google.com/search?q=%
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/documentation-session-title.htmliterm2.set_title
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/dynamic-profiles.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/bugs
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/automatic-profile-switching.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/downloads/pyenv/betamanifest.json
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/downloads/assets/nerd-fonts-v1.zip
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	http://iterm2.com/captured_output.htmlkeyclickm4av32
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	http://www.iterm2.com/coprocesses.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/download.sh
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://www.iterm2.com/documentation.htmlPython
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	http://www.iterm2.com/smartselection.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/downloads/pyenv/manifest.jsonScripting:
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/slow_triggers
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/documentation-copymode.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://openai.com/join/
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/ai-plugin.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/documentation-shell-integration.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/downloads/pyenv/betamanifest.jsonScripting:
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://www.iterm2.com/documentation-triggers.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/patrons.txt
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/python-api-security-modelNew
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/regex
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://whitebox.so/?utm_source=iTerm2
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/documentation-csiu.html-
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/search_syntax.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://www.iterm2.com/documentation.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/clock-status-bar-component-help
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/documentation-copymode.html-
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/status-bar-layout
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/3.3/documentation-status-bar.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/downloads/pyenv/manifest.json
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://gitlab.com/gnachman/iterm2/wikis/TmuxIntegration
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/troubleshoot-hostnameConnect
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/why_no_content.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/aiterm
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/documentation-session-title.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://www.iterm2.com/colorgallery
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://www.iterm2.com/triggers.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/captured_output.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/python-api-security-model
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://api.openai.com/v1/completions
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/Home
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://api.openai.com/v1/chat/completionsthe
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://platform.openai.com/api-keys
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/shell_integration/install_shell_integration.sh
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	http://www.iterm2.com/coprocesses.htmlc16
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/troubleshoot-hostname
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com//tmux22bug.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/shell_integration/install_shell_integration_and_utilities.sh
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/images.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/shell_integration.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/donate.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/ai-plugin.htmlProblem
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/credits
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://latch.bio/
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://api.openai.com/v1/chat/completions
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://www.iterm2.com/documentation-utilities.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/regexkMGTPEZY%
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/documentation-smart-selection.htmlCopyEnter
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/lastpass-cli
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://www.iterm2.com/triggers.html-
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://www.iterm2.com/smartselection.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	http://www.iterm2.com/smartselection.html-
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/downloads/assets/nerd-fonts-v1.zipv32
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://openai.com/join/https://platform.openai.com/api-keyshttps://iterm2.com/aiterm/opt/local/bin/
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/python-api
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/ai-prompt-helpCheckMarkWarningSignCopy
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/coprocesses.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/creditsCreditshttps://iterm2.com/patrons.txtError
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/documentation-smart-selection.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/paste_bracketing
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/bugs.
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/documentation-shell-integration.htmlhttps://www.iterm2.com/documentation-utilitie
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/python-api-auth.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://gitlab.com/gnachman/iterm2/uploads/
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://gitlab.com/gnachman/iterm2/-/wikis/SSH-Integration
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/badges.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	https://iterm2.com/ai-prompt-help
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Details

Name:	http://iterm2.com/shell_integration.html
TargetID:	256
From Memory:	true
Current Path:	/Users/bernard/Desktop/iTerm2
Source:	iTerm2

Signature Hits	Behavior Group	Mitre Attack
URLs found in memory or binary data	Networking

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report
iTerm2

Processes

URLs

Domains

IPs

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC ReportiTerm2

Processes

URLs

Domains

IPs

IOC Report
iTerm2