aad02e1bbbb00b10402fb9abc3fb93c5eee7df168946b1f75bbdb510b6763a1f | Triage™

Login
Reports

Overview

overview

4

Static

static

1

Farrago 2....2).dmg

macos-10.15-amd64

1

Farrago 2...._store

macos-10.15-amd64

1

Farrago 2....n.icns

macos-10.15-amd64

1

Farrago 2....ate#ps

macos-10.15-amd64

1

Farrago 2....e.macl

macos-10.15-amd64

1

Farrago 2....antine

macos-10.15-amd64

1

Farrago 2....bg.png

macos-10.15-amd64

1

Farrago 2....ate#ps

macos-10.15-amd64

1

Farrago 2....e.macl

macos-10.15-amd64

1

Farrago 2....ertags

macos-10.15-amd64

1

Farrago 2....antine

macos-10.15-amd64

1

Farrago 2....lp.txt

macos-10.15-amd64

1

Farrago 2....b7ynxa

macos-10.15-amd64

1

Farrago 2....t:rsrc

macos-10.15-amd64

1

Farrago 2....T].dmg

macos-10.15-amd64

1

Farrago 2....es.nib

macos-10.15-amd64

4

Farrago 2....es.nib

macos-10.15-amd64

4

Farrago 2....am.wav

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....il.m4a

macos-10.15-amd64

4

Farrago 2....il.m4a

macos-10.15-amd64

4

Farrago 2....op.svg

macos-10.15-amd64

4

Farrago 2....ew.svg

macos-10.15-amd64

4

Farrago 2....le.svg

macos-10.15-amd64

4

Farrago 2....ervice

macos-10.15-amd64

1

Farrago 2....ate#ps

macos-10.15-amd64

1

Farrago 2....hgz4we

macos-10.15-amd64

1

Farrago 2....y:rsrc

macos-10.15-amd64

1

Analysis

max time kernel
418s
max time network
704s
platform
macos-10.15_amd64
resource
macos-20250619-en
resource tags

arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
04/08/2026, 14:19

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Farrago 2.1.5 [TNT](2).dmg

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

Farrago 2.1.5/.ds_store

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

Farrago 2.1.5/.VolumeIcon.icns

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.macl

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.quarantine

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

Farrago 2.1.5/.background/bg.png

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral8

Sample

Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

Farrago 2.1.5/.background/bg.png:com.apple.macl

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

Farrago 2.1.5/.background/bg.png:com.apple.quarantine

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

Farrago 2.1.5/Help.txt

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral13

Sample

Farrago 2.1.5/Help.txt:com.apple.metadata_kmdlabel_dnftphl3a2xxyn2rmlkjb7ynxa

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

Farrago 2.1.5/Help.txt:rsrc

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral15

Sample

Farrago 2.1.5/Manual install/Farrago 2.1.5 [TNT].dmg

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral16

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/FGControllerPreferences.nib

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral17

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/FGPreferences.nib

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral18

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/ReverseScream.wav

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral19

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral20

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral21

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral22

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral23

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral24

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral25

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.loop.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral26

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.preview.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral27

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/xmark.circle.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral28

Sample

Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral29

Sample

Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral30

Sample

Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral31

Sample

Farrago 2.1.5/Open Gatekeeper friendly:rsrc

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Report Analysis Logs

General

Target
Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags
Size 42B
Sample260804-rmvkessemd
SHA256 aad02e1bbbb00b10402fb9abc3fb93c5eee7df168946b1f75bbdb510b6763a1f
MD5 3d641df340a8a0121793c0a077da61b1
SHA1 44668804d8d14412ba09d3625109dfacb70e5476
SHA512 e67f6a03bd110b718bccd0519b71db6c9473e4cf4eca2254cd81ef703a768ef81300e173010ab184657efa3f67284d139f23afcd6e0071332240f6195a0fcf77
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags\""
1⤵
PID:478

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags\""
1⤵
PID:478

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags"
1⤵
PID:478
- /bin/zsh
  /bin/zsh -c "/Users/run/Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags"
  2⤵
  PID:479
- /Users/run/Farrago
  /Users/run/Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags
  2⤵
  PID:479

/usr/libexec/xpcproxy
xpcproxy com.apple.nsurlstoraged
1⤵
PID:488

/usr/libexec/nsurlstoraged
/usr/libexec/nsurlstoraged --privileged
1⤵
PID:488

/usr/libexec/xpcproxy
xpcproxy com.apple.StreamingUnzipService 172
1⤵
PID:489

/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
1⤵
PID:489

/usr/libexec/xpcproxy
xpcproxy com.apple.diagnosticd
1⤵
PID:497

/usr/libexec/diagnosticd
/usr/libexec/diagnosticd
1⤵
PID:497

/usr/libexec/xpcproxy
xpcproxy com.apple.newsyslog
1⤵
PID:498

/usr/sbin/newsyslog
/usr/sbin/newsyslog
1⤵
PID:498

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy