Resubmissions
14/09/2026, 17:50
260914-wembasfr31714/09/2026, 06:02
260914-grh23shj6y714/09/2026, 05:15
260914-fxt6vsswfw830/07/2026, 03:58
260730-ejlrwscn81706/05/2026, 23:57
260506-3zmk5ags4n7Analysis
- max time kernel
374s - max time network
506s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
- submitted
30/07/2026, 03:58
General
- Target Evidence bundle.pdf
- Size 6.5MB
- Sample260730-ejlrwscn81
- SHA256 c46770a6e22f4e6a564d70ed2d7e75b64dea823511a0e389dc608ff05ff6f66e
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"open /Users/run/Evidence\\ bundle.pdf\""1⤵
-
/bin/bashsh -c "sudo /bin/zsh -c \"open /Users/run/Evidence\\ bundle.pdf\""1⤵
-
/usr/bin/sudosudo /bin/zsh -c "open /Users/run/Evidence\\ bundle.pdf"1⤵
-
/bin/zsh/bin/zsh -c "open /Users/run/Evidence\\ bundle.pdf"2⤵
-
-
/usr/bin/openopen "/Users/run/Evidence bundle.pdf"2⤵
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.metadata.mdwrite1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.AccountPolicyHelper1⤵
-
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵
-
/usr/sbin/spindump/usr/sbin/spindump1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵