Analysis
- max time kernel
127s - max time network
123s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
24/04/2026, 02:37
Static task
static1
Behavioral task
behavioral1
Sample
2026-04-24_3e645654dbc0e25fd3fe3ebdfc0cb042_adload_akira_glassworm_rekoobe
Resource
macos-20250619-en
0 signatures
150 seconds
General
- Target 2026-04-24_3e645654dbc0e25fd3fe3ebdfc0cb042_adload_akira_glassworm_rekoobe
- Size 2.5MB
- Sample260424-c4n2msc16v
- SHA256 1def113c8e30e8708d3df6be7277a796b905904cb077d75f5eaeedbf35ccb43b
- MD5 3e645654dbc0e25fd3fe3ebdfc0cb042
- SHA1 cd0f2a57d021456d26b8ccbae301da770cdcad05
- SHA512 a5b8b3768e4b3bcb18b53d58b7fd763a98f353d30e996d75301c34374cc6bbd74e53c7570cf6fd2f5496ebb7aefc50bb25995437c754741bb760b4c7ee5bae86
- SSDEEP 24576:cOKCWqmDjLVaIVOGjTnR2F1LdlDlMj2o5up3ryGVv1wLGgfM1e6AfKQn652hBe87:iDtbVbnYRluU/HepxQ83hbP2yTPqy
- TLSH T159C5BF46F55C6D17E6C7B3BC8D4A8B60713AF5604726C35B3D12826CFC82B961C2A7B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/2026-04-24_3e645654dbc0e25fd3fe3ebdfc0cb042_adload_akira_glassworm_rekoobe\""1⤵PID:474
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/2026-04-24_3e645654dbc0e25fd3fe3ebdfc0cb042_adload_akira_glassworm_rekoobe\""1⤵PID:474
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/2026-04-24_3e645654dbc0e25fd3fe3ebdfc0cb042_adload_akira_glassworm_rekoobe1⤵PID:474
-
/bin/zsh/bin/zsh -c /Users/run/2026-04-24_3e645654dbc0e25fd3fe3ebdfc0cb042_adload_akira_glassworm_rekoobe2⤵PID:477
-
-
/Users/run/2026-04-24_3e645654dbc0e25fd3fe3ebdfc0cb042_adload_akira_glassworm_rekoobe/Users/run/2026-04-24_3e645654dbc0e25fd3fe3ebdfc0cb042_adload_akira_glassworm_rekoobe2⤵PID:477
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:501
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:501
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:511
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:512
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:514
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:514