3e6143b0444dfe9c91955dbcfbe43b3fce9dc94d133e7738d5e067c025e87235 | Triage™

Login
Reports

Overview

overview

8

Static

static

8

SiriusQT/#...64.exe

windows10-2004-x64

7

SiriusQT/#...64.exe

windows11-21h2-x64

3

SiriusQT/Qt5Core.dll

windows10-2004-x64

1

SiriusQT/Qt5Core.dll

windows11-21h2-x64

1

SiriusQT/Qt5Gui.dll

windows10-2004-x64

1

SiriusQT/Qt5Gui.dll

windows11-21h2-x64

1

SiriusQT/Q...rk.dll

windows10-2004-x64

1

SiriusQT/Q...rk.dll

windows11-21h2-x64

1

SiriusQT/Q...ts.dll

windows10-2004-x64

1

SiriusQT/Q...ts.dll

windows11-21h2-x64

1

SiriusQT/SiriusQT.exe

windows10-2004-x64

1

SiriusQT/SiriusQT.exe

windows11-21h2-x64

1

SiriusQT/S...er.bat

windows10-2004-x64

7

SiriusQT/S...er.bat

windows11-21h2-x64

7

SiriusQT/c...on.key

macos-10.15-amd64

1

SiriusQT/i...eg.dll

windows10-2004-x64

1

SiriusQT/i...eg.dll

windows11-21h2-x64

1

SiriusQT/p...ws.dll

windows10-2004-x64

1

SiriusQT/p...ws.dll

windows11-21h2-x64

1

Analysis

max time kernel
69s
max time network
139s
platform
macos-10.15_amd64
resource
macos-20250619-en
resource tags

arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
04/05/2026, 11:36

Sharing

Copy URL Twitter E-mail

Static task

static1

3 signatures

revoked_codesign

Behavioral task

behavioral1

Sample

SiriusQT/#RunAsDate_x64.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

4 signatures

150 seconds

defense_evasion privilege_escalation

Behavioral task

behavioral2

Sample

SiriusQT/#RunAsDate_x64.exe

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

defense_evasion privilege_escalation

Behavioral task

behavioral3

Sample

SiriusQT/Qt5Core.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

SiriusQT/Qt5Core.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

SiriusQT/Qt5Gui.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

SiriusQT/Qt5Gui.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

SiriusQT/Qt5Network.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

SiriusQT/Qt5Network.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

SiriusQT/Qt5Widgets.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

SiriusQT/Qt5Widgets.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

SiriusQT/SiriusQT.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

SiriusQT/SiriusQT.exe

Resource

win11-20260130-en

windows11-21h2-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

SiriusQT/SiriusQT_Cracked_Launcher.bat

Resource

win10v2004-20260130-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion privilege_escalation

Behavioral task

behavioral14

Sample

SiriusQT/SiriusQT_Cracked_Launcher.bat

Resource

win11-20260130-en

windows11-21h2-x64

9 signatures

150 seconds

defense_evasion privilege_escalation

Behavioral task

behavioral15

Sample

SiriusQT/connection.key

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

SiriusQT/imageformats/qjpeg.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

SiriusQT/imageformats/qjpeg.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

SiriusQT/platforms/qwindows.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

SiriusQT/platforms/qwindows.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
SiriusQT/connection.key
Size 32B
Sample260504-nqplssh12t
SHA256 3e6143b0444dfe9c91955dbcfbe43b3fce9dc94d133e7738d5e067c025e87235
MD5 11c43f8090f770470ce3677e09dea1ce
SHA1 4cd1eb738aeb403c5de055ec1245bec274ea4a52
SHA512 66eb117f4fe5eda40e9a3dd003a0047826fe3a499b68874172b0ad067bb131e9d9989dbe246f4905447570a6fd7558dbe86299146fbc0befdb9c75aa561cf471
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/SiriusQT/connection.key\""
1⤵
PID:463

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/SiriusQT/connection.key\""
1⤵
PID:463

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/SiriusQT/connection.key
1⤵
PID:463
- /bin/zsh
  /bin/zsh -c /Users/run/SiriusQT/connection.key
  2⤵
  PID:465
- /Users/run/SiriusQT/connection.key
  /Users/run/SiriusQT/connection.key
  2⤵
  PID:465
- /bin/sh
  sh /Users/run/SiriusQT/connection.key
  2⤵
  PID:465
- /bin/bash
  sh /Users/run/SiriusQT/connection.key
  2⤵
  PID:465

/usr/libexec/xpcproxy
xpcproxy com.apple.nsurlstoraged
1⤵
PID:498

/usr/libexec/nsurlstoraged
/usr/libexec/nsurlstoraged --privileged
1⤵
PID:498

/usr/libexec/xpcproxy
xpcproxy com.apple.StreamingUnzipService 197
1⤵
PID:499

/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
1⤵
PID:499

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy