Analysis
- max time kernel
48s - max time network
36s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
07/07/2026, 10:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OnlineFix64.dll
Resource
win11-20260513-en
0 signatures
60 seconds
Behavioral task
behavioral2
Sample
OnlineFix64.dll
Resource
macos-20250619-en
0 signatures
60 seconds
General
- Target OnlineFix64.dll
- Size 13.2MB
- Sample260707-msfagads5q
- SHA256 812294ebae277a30386eb16d8e1b8e356a24d47f014339df7c29d77f8b0544a5
- MD5 be737b81fef33e51bf18d521ced512c6
- SHA1 90335a2e07caa433895b246203aac40f6d0f74f3
- SHA512 67a56cdf68b81644f50fdec11ffe107cd83ee6562e0b9c50e2a45e8792e42d06f7c07774f021e54e2d509d706744de180bdb3ccb7c9ca6da2936c4747247bf7d
- SSDEEP 196608:RrATka029FenZW3Q8YrVNnZv9/F91mWsz0kg4kAHh3Zkghk0XV4YPNOLOOKj:/eLIJ5d9/FjxsGTiJ1hk+HPNTj
- TLSH T1B8D6129925D4937CC4408138F5451AF9F0D97C888CFD8826FFC749127AB1DA9C8BABB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/OnlineFix64.dll\""1⤵PID:454
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/OnlineFix64.dll\""1⤵PID:454
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/OnlineFix64.dll1⤵PID:454
-
/bin/zsh/bin/zsh -c /Users/run/OnlineFix64.dll2⤵PID:456
-
-
/Users/run/OnlineFix64.dll/Users/run/OnlineFix64.dll2⤵PID:456
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:486
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:486
-
/usr/libexec/xpcproxyxpcproxy com.apple.StreamingUnzipService 1721⤵PID:487
-
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService1⤵PID:487