Overview

overview

4

Static

static

1

TopazPhoto...64.zip

macos-10.15-amd64

1

TopazPhoto...ommand

macos-10.15-amd64

4

TopazPhoto...64.pkg

macos-10.15-amd64

1

Resubmissions

27/07/2026, 00:35

260727-axhvyatcqb1

26/07/2026, 23:44

260726-3q83rssgnf4

26/07/2026, 23:34

260726-3kexqssyes1

26/07/2026, 23:19

260726-3a7j1aen3y1

26/07/2026, 23:08

260726-2421yaswg13

Analysis

  • user interaction
    yes
  • max time kernel
    720s
  • max time network
    971s
  • platform
    macos-10.15_amd64
  • resource
    macos-20250619-en
  • resource tags

    arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    26/07/2026, 23:44

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    TopazPhoto-1.6.0-arm64/TopazPhoto-1.6.0-arm64.pkg
  • Size 1007.3MB
  • Sample260726-3q83rssgnf
  • SHA256 0d5584877a5a4e374500c95b5ab2854682a247de03af8f058ece8cfba7a62932
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"installer -pkg /Users/run/setup.pkg -target /\""
    1⤵
      PID:495
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"installer -pkg /Users/run/setup.pkg -target /\""
      1⤵
        PID:495
      • /usr/bin/sudo
        sudo /bin/zsh -c "installer -pkg /Users/run/setup.pkg -target /"
        1⤵
          PID:495
          • /bin/zsh
            /bin/zsh -c "installer -pkg /Users/run/setup.pkg -target /"
            2⤵
              PID:496
            • /usr/sbin/installer
              installer -pkg /Users/run/setup.pkg -target /
              2⤵
                PID:496
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.StreamingUnzipService 198
              1⤵
                PID:502
              • /System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
                /System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
                1⤵
                  PID:502
                • /usr/libexec/xpcproxy
                  xpcproxy com.apple.systemstats.daily
                  1⤵
                    PID:507
                  • /usr/libexec/xpcproxy
                    xpcproxy com.apple.diagnosticd
                    1⤵
                      PID:509
                    • /usr/libexec/diagnosticd
                      /usr/libexec/diagnosticd
                      1⤵
                        PID:509
                      • /usr/libexec/xpcproxy
                        xpcproxy com.apple.rtcreportingd
                        1⤵
                          PID:510
                        • /usr/libexec/rtcreportingd
                          /usr/libexec/rtcreportingd
                          1⤵
                            PID:510

                          Network

                                MITRE ATT&CK Matrix

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                NRM_Events_2026-07-27-00-21-28.event
                                • Path /var/root/Library/Caches/rtcreportingd/events/NRM_Events_2026-07-27-00-21-28.event
                                • Size 5KB
                                • SHA256 de5078d16ebd0158817d8cab08be3bca03d99435ea3898b57c2890afc25adf8b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                NRM_Events_2026-07-27-00-21-28.event
                                • Path /var/root/Library/Caches/rtcreportingd/events/NRM_Events_2026-07-27-00-21-28.event
                                • Size 8KB
                                • SHA256 d2c898987491cd7e4c0ffa2f42f39e87c0bc22ecff9d0427d9cbde731c5f4bb7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                NRM_Events_2026-07-27-00-21-28.event
                                • Path /var/root/Library/Caches/rtcreportingd/events/NRM_Events_2026-07-27-00-21-28.event
                                • Size 8KB
                                • SHA256 33ef463ea102ccd9e3e5391c2ab8b4ec87b3b315e8b462c218d55d22a0bb65e7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download