9144c7658512da5e081f06281e478f77ed027fc18fcbf7840bb566248236be56 | Triage™

Login
Reports

Overview

overview

4

Static

static

1

Adobe Acti...d].dmg

macos-10.15-amd64

1

Adobe Acti..._store

macos-10.15-amd64

1

Adobe Acti...n.icns

macos-10.15-amd64

1

Adobe Acti...g.tiff

macos-10.15-amd64

1

Adobe Acti...e65.gz

macos-10.15-amd64

1

000000000e2aae65

macos-10.15-amd64

4

Adobe Acti...e66.gz

macos-10.15-amd64

1

000000000e2aae66

macos-10.15-amd64

4

Adobe Acti...d-uuid

macos-10.15-amd64

1

Adobe Acti...fo.xml

macos-10.15-amd64

1

Adobe Acti...n Tool

macos-10.15-amd64

1

Adobe Acti...kgInfo

macos-10.15-amd64

1

Adobe Acti...n.icns

macos-10.15-amd64

4

Adobe Acti...ts.car

macos-10.15-amd64

4

Adobe Acti...trings

macos-10.15-amd64

4

Adobe Acti..._dylib

macos-10.15-amd64

4

Adobe Acti....dylib

macos-10.15-amd64

4

Adobe Acti...trings

macos-10.15-amd64

4

Adobe Acti...es.xml

macos-10.15-amd64

1

Adobe Acti...�:rsrc

macos-10.15-amd64

1

Adobe Acti...程序

macos-10.15-amd64

1

Adobe Acti...��.xml

macos-10.15-amd64

1

Adobe Acti...c:rsrc

macos-10.15-amd64

1

Analysis

max time kernel
143s
max time network
107s
platform
macos-10.15_amd64
resource
macos-20250619-en
resource tags

arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
04/06/2026, 07:44

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Adobe Activation Tool 1.2.6 [MacKed].dmg

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Adobe Activation Tool 1.2.6 [MacKed]/.ds_store

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Adobe Activation Tool 1.2.6 [MacKed]/.VolumeIcon.icns

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Adobe Activation Tool 1.2.6 [MacKed]/.background/dmgcanvas_bg.tiff

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/000000000e2aae65.gz

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

000000000e2aae65

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral7

Sample

Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/000000000e2aae66.gz

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

000000000e2aae66

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral9

Sample

Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/fseventsd-uuid

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Info.xml

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/MacOS/Adobe Activation Tool

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/PkgInfo

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Resources/AppIcon.icns

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral14

Sample

Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Resources/Assets.car

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral15

Sample

Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Resources/en.lproj/Localizable.strings

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral16

Sample

Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Resources/insert_dylib

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral17

Sample

Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Resources/macked.app.dylib

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral18

Sample

Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Resources/zh-Hans.lproj/Localizable.strings

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral19

Sample

Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/_CodeSignature/CodeResources.xml

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Adobe Activation Tool 1.2.6 [MacKed]/已损坏修复:rsrc

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Adobe Activation Tool 1.2.6 [MacKed]/应用程序

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Adobe Activation Tool 1.2.6 [MacKed]/更多应用.xml

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Adobe Activation Tool 1.2.6 [MacKed]/更多应用.webloc:rsrc

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Report Analysis Logs

General

Target
Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/000000000e2aae65.gz
Size 48B
Sample260604-jla6dsa18v
SHA256 9144c7658512da5e081f06281e478f77ed027fc18fcbf7840bb566248236be56
MD5 aa6937c1b0bc396374ac86572ffe3807
SHA1 9fcf6f0773151242202687614f4bfda8f9a6f52c
SHA512 7fc0a200bfdb88d5a3562b38714f8d5f96bf6de439eb93c7bcfb9d10514158a4a65c1671d4301898d53531af8b6a53f06e773659f5cbfed014eb13dfc2f4e7c0
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/000000000e2aae65.gz\""
1⤵
PID:486

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/000000000e2aae65.gz\""
1⤵
PID:486

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/000000000e2aae65.gz"
1⤵
PID:486
- /bin/zsh
  /bin/zsh -c "/Users/run/Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/000000000e2aae65.gz"
  2⤵
  PID:488

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:503

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:503

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:506

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:506

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:507

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:507

/usr/libexec/xpcproxy
xpcproxy com.apple.nsurlstoraged
1⤵
PID:519

/usr/libexec/nsurlstoraged
/usr/libexec/nsurlstoraged --privileged
1⤵
PID:519

/usr/libexec/xpcproxy
xpcproxy com.apple.StreamingUnzipService 186
1⤵
PID:524

/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
1⤵
PID:524

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:525

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:525

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:528

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:529

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy