Overview

overview

7

Static

static

3

abc638f806...loader

macos-10.15-amd64

7

Analysis

  • max time kernel
    125s
  • max time network
    150s
  • platform
    macos-10.15_amd64
  • resource
    macos-20250619-en
  • resource tags

    arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    28/07/2026, 00:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    abc638f80640a580ddb94f1e3c2208bcff45d477134407bfa95a05d9f9db4310.loader
  • Size 11.7MB
  • Sample260728-apla4aeb23
  • SHA256 9251fc833b28183fe907ee9e035d96e09cd56000788e918d5b40b1557d8975e6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasion

Malware Config

Signatures

  • System Checks 1 TTPs 2 IoCs

    Adversaries may employ various system checks to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox.

    defense_evasion

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/abc638f80640a580ddb94f1e3c2208bcff45d477134407bfa95a05d9f9db4310.loader\""
    1⤵
      PID:455
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/abc638f80640a580ddb94f1e3c2208bcff45d477134407bfa95a05d9f9db4310.loader\""
      1⤵
        PID:455
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/abc638f80640a580ddb94f1e3c2208bcff45d477134407bfa95a05d9f9db4310.loader
        1⤵
          PID:455
          • /bin/zsh
            /bin/zsh -c /Users/run/abc638f80640a580ddb94f1e3c2208bcff45d477134407bfa95a05d9f9db4310.loader
            2⤵
              PID:456
            • /Users/run/abc638f80640a580ddb94f1e3c2208bcff45d477134407bfa95a05d9f9db4310.loader
              /Users/run/abc638f80640a580ddb94f1e3c2208bcff45d477134407bfa95a05d9f9db4310.loader
              2⤵
                PID:456
            • /bin/sh
              sh -c "system_profiler SPHardwareDataType 2>/dev/null"
              1⤵
                PID:459
              • /bin/bash
                sh -c "system_profiler SPHardwareDataType 2>/dev/null"
                1⤵
                  PID:459
                  • /usr/sbin/system_profiler
                    system_profiler SPHardwareDataType
                    2⤵
                      PID:460
                  • /usr/bin/bzip2
                    /usr/bin/bzip2 -f /var/log/wifi.log.0
                    1⤵
                      PID:487
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.nsurlstoraged
                      1⤵
                        PID:492
                      • /usr/libexec/nsurlstoraged
                        /usr/libexec/nsurlstoraged --privileged
                        1⤵
                          PID:492
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.StreamingUnzipService 172
                          1⤵
                            PID:493
                          • /System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
                            /System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
                            1⤵
                              PID:493

                            Network

                                  MITRE ATT&CK Enterprise v16

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads