Analysis
- max time kernel
364s - max time network
518s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
16/05/2026, 08:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WOMicClientSetup6.3.exe
Resource
macos-20250619-en
6 signatures
900 seconds
Behavioral task
behavioral2
Sample
$PLUGINSDIR/LangDLL.dll
Resource
macos-20250619-en
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
macos-20250619-en
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
macos-20250619-en
0 signatures
900 seconds
General
- Target $PLUGINSDIR/System.dll
- Size 11KB
- Sample260516-kner2abz4y
- SHA256 982c5fb7ada7d8c9bc3e419d1c35da6f05bc5dd845940c179af3a33d00a36a8b
- MD5 0ff2d70cfdc8095ea99ca2dabbec3cd7
- SHA1 10c51496d37cecd0e8a503a5a9bb2329d9b38116
- SHA512 cb5fc0b3194f469b833c2c9abf493fcec5251e8609881b7f5e095b9bd09ed468168e95dda0ba415a7d8d6b7f0dee735467c0ed8e52b223eb5359986891ba6e2e
- SSDEEP 192:eK24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlASl:u8QIl975eXqlWBrz7YLOlA
- TLSH T12B325C02135481F3E4918138C86B3A276B6A15029BF98E57DFD39646BE30BE3BD7D603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/\$PLUGINSDIR/System.dll\""1⤵PID:471
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/\$PLUGINSDIR/System.dll\""1⤵PID:471
-
/usr/bin/sudosudo /bin/zsh -c /Users/run//System.dll1⤵PID:471
-
/bin/zsh/bin/zsh -c /Users/run//System.dll2⤵PID:476
-
-
/Users/run//System.dll/Users/run//System.dll2⤵PID:476
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:510
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:510
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:511
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:511