Overview
overview
4Static
static
1Adobe Acti...d].dmg
macos-10.15-amd64
1Adobe Acti..._store
macos-10.15-amd64
1Adobe Acti...n.icns
macos-10.15-amd64
1Adobe Acti...g.tiff
macos-10.15-amd64
1Adobe Acti...e65.gz
macos-10.15-amd64
1000000000e2aae65
macos-10.15-amd64
4Adobe Acti...e66.gz
macos-10.15-amd64
1000000000e2aae66
macos-10.15-amd64
4Adobe Acti...d-uuid
macos-10.15-amd64
1Adobe Acti...fo.xml
macos-10.15-amd64
1Adobe Acti...n Tool
macos-10.15-amd64
1Adobe Acti...kgInfo
macos-10.15-amd64
1Adobe Acti...n.icns
macos-10.15-amd64
4Adobe Acti...ts.car
macos-10.15-amd64
4Adobe Acti...trings
macos-10.15-amd64
4Adobe Acti..._dylib
macos-10.15-amd64
4Adobe Acti....dylib
macos-10.15-amd64
4Adobe Acti...trings
macos-10.15-amd64
4Adobe Acti...es.xml
macos-10.15-amd64
1Adobe Acti...�:rsrc
macos-10.15-amd64
1Adobe Acti...程序
macos-10.15-amd64
1Adobe Acti...��.xml
macos-10.15-amd64
1Adobe Acti...c:rsrc
macos-10.15-amd64
1Analysis
- max time kernel
110s - max time network
128s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
04/06/2026, 07:44
Static task
static1
Behavioral task
behavioral1
Sample
Adobe Activation Tool 1.2.6 [MacKed].dmg
Resource
macos-20250619-en
Behavioral task
behavioral2
Sample
Adobe Activation Tool 1.2.6 [MacKed]/.ds_store
Resource
macos-20250619-en
Behavioral task
behavioral3
Sample
Adobe Activation Tool 1.2.6 [MacKed]/.VolumeIcon.icns
Resource
macos-20250619-en
Behavioral task
behavioral4
Sample
Adobe Activation Tool 1.2.6 [MacKed]/.background/dmgcanvas_bg.tiff
Resource
macos-20250619-en
Behavioral task
behavioral5
Sample
Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/000000000e2aae65.gz
Resource
macos-20250619-en
Behavioral task
behavioral6
Sample
000000000e2aae65
Resource
macos-20250619-en
Behavioral task
behavioral7
Sample
Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/000000000e2aae66.gz
Resource
macos-20250619-en
Behavioral task
behavioral8
Sample
000000000e2aae66
Resource
macos-20250619-en
Behavioral task
behavioral9
Sample
Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/fseventsd-uuid
Resource
macos-20250619-en
Behavioral task
behavioral10
Sample
Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Info.xml
Resource
macos-20250619-en
Behavioral task
behavioral11
Sample
Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/MacOS/Adobe Activation Tool
Resource
macos-20250619-en
Behavioral task
behavioral12
Sample
Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/PkgInfo
Resource
macos-20250619-en
Behavioral task
behavioral13
Sample
Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Resources/AppIcon.icns
Resource
macos-20250619-en
Behavioral task
behavioral14
Sample
Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Resources/Assets.car
Resource
macos-20250619-en
Behavioral task
behavioral15
Sample
Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Resources/en.lproj/Localizable.strings
Resource
macos-20250619-en
Behavioral task
behavioral16
Sample
Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Resources/insert_dylib
Resource
macos-20250619-en
Behavioral task
behavioral17
Sample
Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Resources/macked.app.dylib
Resource
macos-20250619-en
Behavioral task
behavioral18
Sample
Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/Resources/zh-Hans.lproj/Localizable.strings
Resource
macos-20250619-en
Behavioral task
behavioral19
Sample
Adobe Activation Tool 1.2.6 [MacKed]/Adobe Activation Tool.app/Contents/_CodeSignature/CodeResources.xml
Resource
macos-20250619-en
Behavioral task
behavioral20
Sample
Adobe Activation Tool 1.2.6 [MacKed]/已损坏修复:rsrc
Resource
macos-20250619-en
Behavioral task
behavioral21
Sample
Adobe Activation Tool 1.2.6 [MacKed]/应用程序
Resource
macos-20250619-en
Behavioral task
behavioral22
Sample
Adobe Activation Tool 1.2.6 [MacKed]/更多应用.xml
Resource
macos-20250619-en
Behavioral task
behavioral23
Sample
Adobe Activation Tool 1.2.6 [MacKed]/更多应用.webloc:rsrc
Resource
macos-20250619-en
General
- Target Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/fseventsd-uuid
- Size 36B
- Sample260604-jla6dsa18v
- SHA256 593bcc764d7d30c40483833120b41d64c17f2d57c822ec905f8f9df0183ea115
- MD5 f10278e9af2399bb957409bbf8e5d5bc
- SHA1 25ef680b3e31cb81164c3b0d08f8141da3ad9618
- SHA512 2e10123f06cba73628a6d7292a1f1728d16b7ac023de8bbd888dab1a7952436ec2428bc3c355d12d5717f392692c214ba5fcbe83a264949aa4998276eba1fe44
- MD5 SHA1 SHA512
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/fseventsd-uuid\""1⤵PID:475
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/fseventsd-uuid\""1⤵PID:475
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/fseventsd-uuid"1⤵PID:475
-
/bin/zsh/bin/zsh -c "/Users/run/Adobe Activation Tool 1.2.6 [MacKed]/.fseventsd/fseventsd-uuid"2⤵PID:477
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:500
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:500
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:508
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:508
-
/usr/libexec/xpcproxyxpcproxy com.apple.StreamingUnzipService 1721⤵PID:514
-
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService1⤵PID:514
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:517
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:518
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:521
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:521