Overview
overview
3Static
static
1260730-bwj...pcapng
windows10-2004-x64
3260730-bwj...pcapng
windows11-ltsc_2024-x64
3260730-bwj...pcapng
260730-bwj...pcapng
260730-bwj...pcapng
260730-bwj...pcapng
macos-10.15-amd64
1260730-bwj...pcapng
ubuntu-22.04-amd64
260730-bwj...pcapng
debian-9-armhf
260730-bwj...pcapng
debian-9-mips
260730-bwj...pcapng
debian-9-mipsel
Analysis
- max time kernel
264s - max time network
247s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
30/07/2026, 03:59
Static task
static1
Behavioral task
behavioral1
Sample
260730-bwjlhsbj3y-behavioral2.pcapng
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
260730-bwjlhsbj3y-behavioral2.pcapng
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
260730-bwjlhsbj3y-behavioral2.pcapng
Behavioral task
behavioral4
Sample
260730-bwjlhsbj3y-behavioral2.pcapng
Behavioral task
behavioral5
Sample
260730-bwjlhsbj3y-behavioral2.pcapng
Behavioral task
behavioral6
Sample
260730-bwjlhsbj3y-behavioral2.pcapng
Resource
macos-20250619-en
Behavioral task
behavioral7
Sample
260730-bwjlhsbj3y-behavioral2.pcapng
Resource
ubuntu2204-amd64-20260513-en
Behavioral task
behavioral8
Sample
260730-bwjlhsbj3y-behavioral2.pcapng
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral9
Sample
260730-bwjlhsbj3y-behavioral2.pcapng
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral10
Sample
260730-bwjlhsbj3y-behavioral2.pcapng
Resource
debian9-mipsel-20260513-en
General
- Target 260730-bwjlhsbj3y-behavioral2.pcapng
- Size 303KB
- Sample260730-ej24wacn9y
- SHA256 63a782f983dd704e5f95c9932c832785d379d37f148694a0fed913d8e731cde2
- MD5 181b01867474eeb9098b16364efd475d
- SHA1 d65c17ef3103ce7dbbb759a904dd295a45085a7c
- SHA512 e6605854cf1706e6133f45613c1ca6bddb020a0abc51726fe8f7d122986e588c865fabdc87c70e9247bd9a2f68dd821377836f0d04594e1411553d4aa8ce9fe8
- SSDEEP 6144:K/CKDzeoxx1EEtLVqLqb+QDP0b/xIS8TwiPtwjOn/59y/d:KN/IahIbmS2wiP7/59y/d
- TLSH T18F64B0B1CEBA7482D705487810F77FD6BF69E14E9B11C1525A5CAEAB8AC33CB746002D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/260730-bwjlhsbj3y-behavioral2.pcapng\""1⤵PID:474
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/260730-bwjlhsbj3y-behavioral2.pcapng\""1⤵PID:474
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/260730-bwjlhsbj3y-behavioral2.pcapng1⤵PID:474
-
/bin/zsh/bin/zsh -c /Users/run/260730-bwjlhsbj3y-behavioral2.pcapng2⤵PID:477
-
-
/Users/run/260730-bwjlhsbj3y-behavioral2.pcapng/Users/run/260730-bwjlhsbj3y-behavioral2.pcapng2⤵PID:477
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:500
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:500
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:508
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:508
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:509
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:510
-
/usr/libexec/xpcproxyxpcproxy com.apple.StreamingUnzipService 1721⤵PID:511
-
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService1⤵PID:511
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:514
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:514