Overview
overview
8Static
static
373j3B9.7z
windows10-2004-x64
873j3B9.7z
windows11-21h2-x64
1KanvasWebserverLinux
ubuntu-18.04-amd64
1KanvasWebserverMac
macos-10.15-amd64
1LinuxScript.sh
ubuntu-18.04-amd64
6LinuxScript.sh
debian-9-armhf
6LinuxScript.sh
debian-9-mips
1LinuxScript.sh
debian-9-mipsel
1MacScript.sh
ubuntu-18.04-amd64
6MacScript.sh
debian-9-armhf
6MacScript.sh
debian-9-mips
1MacScript.sh
debian-9-mipsel
1MacWrapper.sh
ubuntu-18.04-amd64
1MacWrapper.sh
debian-9-armhf
1MacWrapper.sh
debian-9-mips
1MacWrapper.sh
debian-9-mipsel
1Resubmissions
04/06/2026, 22:47
260604-2qrcaagt8z804/06/2026, 22:25
260604-2b2vgagt2v804/06/2026, 21:13
260604-z2vgzafz8n8Analysis
- max time kernel
114s - max time network
283s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
04/06/2026, 22:25
Static task
static1
Behavioral task
behavioral1
Sample
73j3B9.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
73j3B9.7z
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
KanvasWebserverLinux
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral4
Sample
KanvasWebserverMac
Resource
macos-20250619-en
Behavioral task
behavioral5
Sample
LinuxScript.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
LinuxScript.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral7
Sample
LinuxScript.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral8
Sample
LinuxScript.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral9
Sample
MacScript.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral10
Sample
MacScript.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral11
Sample
MacScript.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral12
Sample
MacScript.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral13
Sample
MacWrapper.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral14
Sample
MacWrapper.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral15
Sample
MacWrapper.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral16
Sample
MacWrapper.sh
Resource
debian9-mipsel-20260513-en
General
- Target KanvasWebserverMac
- Size 15.9MB
- Sample260604-2b2vgagt2v
- SHA256 63e09a3cd9e455fec13b76b0adba91c806093743cc5538e176ce218b9c6c0a22
- MD5 8445a9bac2b0ac856c27d254b8ed8da9
- SHA1 398d7710aa0bf4ecbad1cf74c704d48de7fc7f34
- SHA512 e7a2a70dbda335a924c4febe4a79a9ef59f5d8633412ffeebb43ffae6d2ac77c3603fea34c84008c4e30543fe3d5503ba11761412b20663131a76b8512f207ad
- SSDEEP 196608:qQmArxOsCmAPpZqqxtZaUAtCeA19DSVHIeL7Bj:Sq5RAtxtZTAtL
- TLSH T1D0F69D0173F89F27C5EF8776A0B1444963F5E85AA363E74B2580A6FA2C63B801D517E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/KanvasWebserverMac\""1⤵PID:511
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/KanvasWebserverMac\""1⤵PID:511
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/KanvasWebserverMac1⤵PID:511
-
/bin/zsh/bin/zsh -c /Users/run/KanvasWebserverMac2⤵PID:512
-
-
/Users/run/KanvasWebserverMac/Users/run/KanvasWebserverMac2⤵PID:512
-