Analysis
- user interaction
yes - max time kernel
68s - max time network
102s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
08/07/2026, 04:39
Static task
static1
Behavioral task
behavioral1
Sample
Alcove.dmg
Resource
macos-20250619-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Alcove/Alcove.scpt
Resource
macos-20250619-en
0 signatures
150 seconds
General
- Target Alcove/Alcove.scpt
- Size 146KB
- Sample260708-e9588aaz61
- SHA256 8cd2c7b3a48f947fb9fbb3f8cdd9ceaeb790bd4e5d15b20ad04604447309d315
- MD5 bfd51b3092e837659e7441815dcceadb
- SHA1 32ae94a8643c49f6281358e31fd31535b89f242e
- SHA512 b1ee6dbb8194df234c4d836922d6f59b538a931e637ad5296cdf23fadac421ceaa4a3696d09dc31614ac9ae04176811b9eb16d2ce7014f6c01f4e5e5f2c988fe
- SSDEEP 3072:79bR1RzIRXZ+4rBP1Vum4rnAoTfBwsM8AJOGHedIGfReIQtav2+rQCqpvk+3BF86:79bR1RcRXZ+4r51sm4rnr+8uav2+rVq5
- TLSH T1EAE3E02CD7B84114B9B35694A66E0801762E7F1E672FC8CC11D9C1CC47BE64EA89DF2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"osascript /Users/run/Alcove/Alcove.scpt\""1⤵PID:457
-
/bin/bashsh -c "sudo /bin/zsh -c \"osascript /Users/run/Alcove/Alcove.scpt\""1⤵PID:457
-
/usr/bin/sudosudo /bin/zsh -c "osascript /Users/run/Alcove/Alcove.scpt"1⤵PID:457
-
/bin/zsh/bin/zsh -c "osascript /Users/run/Alcove/Alcove.scpt"2⤵PID:458
-
-
/usr/bin/osascriptosascript /Users/run/Alcove/Alcove.scpt2⤵PID:458
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:492
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:492
-
/usr/libexec/xpcproxyxpcproxy com.apple.StreamingUnzipService 1721⤵PID:494
-
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService1⤵PID:494