Overview
overview
7Static
static
3publish/OpenAL32.dll
windows10-2004-x64
1publish/OpenAL32.dll
windows11-21h2-x64
1publish/Ryujinx.exe
windows10-2004-x64
7publish/Ryujinx.exe
windows11-21h2-x64
1publish/SDL2.dll
windows10-2004-x64
1publish/SDL2.dll
windows11-21h2-x64
1publish/To...et.dll
windows10-2004-x64
1publish/To...et.dll
windows11-21h2-x64
1publish/To...et.dll
windows10-2004-x64
1publish/To...et.dll
windows11-21h2-x64
1publish/To...rk.dll
windows10-2004-x64
1publish/To...rk.dll
windows11-21h2-x64
1publish/To...rs.dll
windows10-2004-x64
1publish/To...rs.dll
windows11-21h2-x64
1publish/To...ry.dll
windows10-2004-x64
1publish/To...ry.dll
windows11-21h2-x64
1publish/To...rs.dll
windows10-2004-x64
1publish/To...rs.dll
windows11-21h2-x64
1publish/To...fe.dll
windows10-2004-x64
1publish/To...fe.dll
windows11-21h2-x64
1publish/To...ry.dll
windows10-2004-x64
1publish/To...ry.dll
windows11-21h2-x64
1publish/To...ox.exe
windows10-2004-x64
1publish/To...ox.exe
windows11-21h2-x64
1publish/To...te.bat
windows10-2004-x64
3publish/To...te.bat
windows11-21h2-x64
3publish/To...er.exe
windows10-2004-x64
3publish/To...er.exe
windows11-21h2-x64
3publish/To...et.dll
windows10-2004-x64
1publish/To...et.dll
windows11-21h2-x64
1publish/To...imp.so
ubuntu-18.04-amd64
1publish/To....dylib
macos-10.15-amd64
1Analysis
- max time kernel
94s - max time network
102s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
05/06/2026, 22:22
Static task
static1
Behavioral task
behavioral1
Sample
publish/OpenAL32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
publish/OpenAL32.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
publish/Ryujinx.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
publish/Ryujinx.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
publish/SDL2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
publish/SDL2.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
publish/Toolbox/AssimpNet.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
publish/Toolbox/AssimpNet.dll
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
publish/Toolbox/DirectXTexNet.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
publish/Toolbox/DirectXTexNet.dll
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
publish/Toolbox/Gl_EditorFramework.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
publish/Toolbox/Gl_EditorFramework.dll
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
publish/Toolbox/System.Buffers.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
publish/Toolbox/System.Buffers.dll
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
publish/Toolbox/System.Memory.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
publish/Toolbox/System.Memory.dll
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
publish/Toolbox/System.Numerics.Vectors.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
publish/Toolbox/System.Numerics.Vectors.dll
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
publish/Toolbox/System.Runtime.CompilerServices.Unsafe.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
publish/Toolbox/System.Runtime.CompilerServices.Unsafe.dll
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
publish/Toolbox/Toolbox.Library.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
publish/Toolbox/Toolbox.Library.dll
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
publish/Toolbox/Toolbox.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
publish/Toolbox/Toolbox.exe
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
publish/Toolbox/Update.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
publish/Toolbox/Update.bat
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
publish/Toolbox/Updater.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
publish/Toolbox/Updater.exe
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
publish/Toolbox/ZstdNet.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
publish/Toolbox/ZstdNet.dll
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
publish/Toolbox/runtimes/linux-x64/native/libassimp.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral32
Sample
publish/Toolbox/runtimes/osx-x64/native/libassimp.dylib
Resource
macos-20250619-en
General
- Target publish/Toolbox/runtimes/osx-x64/native/libassimp.dylib
- Size 7.5MB
- Sample260605-2agsxaev4x
- SHA256 61c4a97d413b739e3b3d267472b1b01732cb68e9141a2948c2a686aaea96b21b
- MD5 b7b093aa65811e95edb32dc0ee4a60bd
- SHA1 7036f5270c2f994aeae6ef4c4b66b829b62ba94c
- SHA512 bae100b57d29cfe774c054ce21ef7ccdea09f3c7cd209315e643b18565048a900da4e9eb19a8bfc8dc8f1b7e405d2d0b6b5f172affbf9e2b84077cebc727fbba
- SSDEEP 196608:MDNX+hR1vQqHOWjjEk1eNs70rpq6SfwH:MhX+zFQyOWjjEk1eNs70rpq6S
- TLSH T14D865B733A73A693CE4562716B9B58F1FB10AC021B9DB08F65E0B10C7BB5E93175A342
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/publish/Toolbox/runtimes/osx-x64/native/libassimp.dylib\""1⤵PID:501
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/publish/Toolbox/runtimes/osx-x64/native/libassimp.dylib\""1⤵PID:501
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/publish/Toolbox/runtimes/osx-x64/native/libassimp.dylib1⤵PID:501
-
/bin/zsh/bin/zsh -c /Users/run/publish/Toolbox/runtimes/osx-x64/native/libassimp.dylib2⤵PID:502
-
-
/Users/run/publish/Toolbox/runtimes/osx-x64/native/libassimp.dylib/Users/run/publish/Toolbox/runtimes/osx-x64/native/libassimp.dylib2⤵PID:502
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:503
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:503
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:527
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:528
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:530
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:530