Analysis
- max time kernel
100s - max time network
127s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
21/04/2026, 18:45
Static task
static1
Behavioral task
behavioral1
Sample
TeamsApp.zip
Resource
macos-20250619-en
0 signatures
150 seconds
General
- Target TeamsApp.zip
- Size 1.8MB
- Sample260421-xec83aax7j
- SHA256 dfee6ea9cafc674b93a8460b9e6beea7f0eb0c28e28d1190309347fd1514dbb6
- MD5 c2e5c4adad409d2bc85d8a10ed424786
- SHA1 0d55ba7883b0732bf99cc0aa8d9e85fb5c56513a
- SHA512 a83b61e9348b8f1469a18c7d29f564d9304c34d8ca6e5ef62c664491cbebb3ea2e420be358902b2809723ced1b4ed2d75c8bc77c216321ca0f2c0c428624a5b3
- SSDEEP 49152:xzLptb3G987QsMvsI6i++7HQA2lHzqJLjjw44G5B44N:xzLptb3+sB+7Hj2pILjjwyBh
- TLSH T16095339BC0A9181EE10C657B84D1B9FA4C2926B6FD0E21CE469C45D843FB5F9CDCF682
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/TeamsApp.zip\""1⤵PID:455
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/TeamsApp.zip\""1⤵PID:455
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/TeamsApp.zip1⤵PID:455
-
/bin/zsh/bin/zsh -c /Users/run/TeamsApp.zip2⤵PID:457
-
-
/Users/run/TeamsApp.zip/Users/run/TeamsApp.zip2⤵PID:457
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:489
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:489
-
/usr/libexec/xpcproxyxpcproxy com.apple.StreamingUnzipService 1981⤵PID:490
-
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService1⤵PID:490