Analysis
- max time kernel
84s - max time network
102s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
30/07/2026, 18:26
Static task
static1
Behavioral task
behavioral1
Sample
print-helper-mac.zip
Resource
macos-20250619-en
0 signatures
150 seconds
General
- Target print-helper-mac.zip
- Size 7.2MB
- Sample260730-w3mlzade96
- SHA256 c7da378532477256d14da360a1081090f2db44318a8d58ddba0c0dbea3a43755
- MD5 fd2824f26beee9e54cb80411a4f3920d
- SHA1 a3bdb0f8da91c607a703b0d9790f7f483ebfcf45
- SHA512 0c0fc32681e529c1b4221442540ad0d55803b2ed472213ca8b4157e745bad0148a140fb879fe467f824130741aa0c3fc608d504af5a58f583e203a94abf0d6dd
- SSDEEP 196608:a0AU0Puexkz7qNLeLw6bgg2+5goCMS+dLTf:y7mexk6ifgg2aHFd3
- TLSH T101761240B6E16ED7FE09F23D412A861C462A4338DB49D217794FC3993F4B3E44E72A5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/print-helper-mac.zip\""1⤵PID:474
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/print-helper-mac.zip\""1⤵PID:474
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/print-helper-mac.zip1⤵PID:474
-
/bin/zsh/bin/zsh -c /Users/run/print-helper-mac.zip2⤵PID:475
-
-
/Users/run/print-helper-mac.zip/Users/run/print-helper-mac.zip2⤵PID:475
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:503
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:503
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:511
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:512
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:516
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:516