Overview
overview
6Static
static
1Payload/Ma...aid.js
windows10-2004-x64
3Payload/Ma...aid.js
windows11-ltsc_2024-x64
3Payload/Main.app/Main
macos-10.15-amd64
1Payload/Ma...nt.ps1
windows10-2004-x64
6Payload/Ma...nt.ps1
windows11-ltsc_2024-x64
6Payload/Ma...nt.ps1
windows10-2004-x64
6Payload/Ma...nt.ps1
windows11-ltsc_2024-x64
6Payload/Ma...nes.js
windows10-2004-x64
3Payload/Ma...nes.js
windows11-ltsc_2024-x64
3Payload/Ma...nes.js
windows10-2004-x64
3Payload/Ma...nes.js
windows11-ltsc_2024-x64
3Payload/Ma...nes.js
windows10-2004-x64
3Payload/Ma...nes.js
windows11-ltsc_2024-x64
3Analysis
- max time kernel
51s - max time network
114s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
24/07/2026, 03:13
Static task
static1
Behavioral task
behavioral1
Sample
Payload/Main.app/MRAID.bundle/mraid.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Payload/Main.app/MRAID.bundle/mraid.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Payload/Main.app/Main
Resource
macos-20250619-en
Behavioral task
behavioral4
Sample
Payload/Main.app/assets/assets/monsters/cloudpony/animations/idleactive-front.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
Payload/Main.app/assets/assets/monsters/cloudpony/animations/idleactive-front.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
Payload/Main.app/assets/assets/monsters/owlevoshiny/animations/homescreen-front.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
Payload/Main.app/assets/assets/monsters/owlevoshiny/animations/homescreen-front.ps1
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral8
Sample
Payload/Main.app/assets/assets/quest-scripts/earth-stones.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
Payload/Main.app/assets/assets/quest-scripts/earth-stones.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
Payload/Main.app/assets/assets/quest-scripts/fire-stones.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
Payload/Main.app/assets/assets/quest-scripts/fire-stones.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
Payload/Main.app/assets/assets/quest-scripts/water-stones.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
Payload/Main.app/assets/assets/quest-scripts/water-stones.js
Resource
win11ltsc2024-20260709-en
General
- Target Payload/Main.app/Main
- Size 30.3MB
- Sample260724-dqrfaazzht
- SHA256 ed026fa876fd890bf606e805252c9f85e1d5455b0ead362707878ee904447775
- MD5 169e1238c73d87d607aad80057822e2c
- SHA1 a4a0b07e1d18d0e1cefe6bc117d1a3873211e5cf
- SHA512 e3fd1ecad21bc7f2ba8bf08bf63e07939d6ce2a28014a3cfb7409fd92b537a5908b39ff0f383137a2311a1d2e3d92d3ca2212f22825d103f2e009f787e34e967
- SSDEEP 196608:uJcIOEcI9X8UxD9UE9KnpLu49b1MEkl2LfSG/i371fKqtE5Ek4zoC6Xbt0/NhT5G:uJaEv99rUE9IRF8KJrT
- TLSH T138674902658C0B29E2C4B03C5F448B64EB1FFA684264E3C77D777999ACA3BE5D42C572
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Payload/Main.app/Main\""1⤵PID:494
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Payload/Main.app/Main\""1⤵PID:494
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Payload/Main.app/Main1⤵PID:494
-
/bin/zsh/bin/zsh -c /Users/run/Payload/Main.app/Main2⤵PID:495
-
-
/Users/run/Payload/Main.app/Main/Users/run/Payload/Main.app/Main2⤵PID:495
-