028bbbaa4e930a80e219115e7d36233868f128d3fed2c5c8c3b8ffbbb408fbd2

Login
Reports

Overview

overview

Static

static

Farrago 2....2).dmg

macos-10.15-amd64

Farrago 2...._store

macos-10.15-amd64

Farrago 2....n.icns

macos-10.15-amd64

Farrago 2....ate#ps

macos-10.15-amd64

Farrago 2....e.macl

macos-10.15-amd64

Farrago 2....antine

macos-10.15-amd64

Farrago 2....bg.png

macos-10.15-amd64

Farrago 2....ate#ps

macos-10.15-amd64

Farrago 2....e.macl

macos-10.15-amd64

Farrago 2....ertags

macos-10.15-amd64

Farrago 2....antine

macos-10.15-amd64

Farrago 2....lp.txt

macos-10.15-amd64

Farrago 2....b7ynxa

macos-10.15-amd64

Farrago 2....t:rsrc

macos-10.15-amd64

Farrago 2....T].dmg

macos-10.15-amd64

Farrago 2....es.nib

macos-10.15-amd64

Farrago 2....es.nib

macos-10.15-amd64

Farrago 2....am.wav

macos-10.15-amd64

Farrago 2....adata/

macos-10.15-amd64

Farrago 2....adata/

macos-10.15-amd64

Farrago 2....adata/

macos-10.15-amd64

Farrago 2....adata/

macos-10.15-amd64

Farrago 2....il.m4a

macos-10.15-amd64

Farrago 2....il.m4a

macos-10.15-amd64

Farrago 2....op.svg

macos-10.15-amd64

Farrago 2....ew.svg

macos-10.15-amd64

Farrago 2....le.svg

macos-10.15-amd64

Farrago 2....ervice

macos-10.15-amd64

Farrago 2....ate#ps

macos-10.15-amd64

Farrago 2....hgz4we

macos-10.15-amd64

Farrago 2....y:rsrc

macos-10.15-amd64

Analysis

max time kernel
418s
max time network
721s
platform
macos-10.15_amd64
resource
macos-20250619-en
resource tags

arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
04/08/2026, 14:19

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Farrago 2.1.5 [TNT](2).dmg

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

Farrago 2.1.5/.ds_store

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

Farrago 2.1.5/.VolumeIcon.icns

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.macl

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.quarantine

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

Farrago 2.1.5/.background/bg.png

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral8

Sample

Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

Farrago 2.1.5/.background/bg.png:com.apple.macl

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

Farrago 2.1.5/.background/bg.png:com.apple.quarantine

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

Farrago 2.1.5/Help.txt

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral13

Sample

Farrago 2.1.5/Help.txt:com.apple.metadata_kmdlabel_dnftphl3a2xxyn2rmlkjb7ynxa

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

Farrago 2.1.5/Help.txt:rsrc

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral15

Sample

Farrago 2.1.5/Manual install/Farrago 2.1.5 [TNT].dmg

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral16

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/FGControllerPreferences.nib

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral17

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/FGPreferences.nib

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral18

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/ReverseScream.wav

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral19

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral20

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral21

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral22

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral23

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral24

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral25

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.loop.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral26

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.preview.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral27

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/xmark.circle.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral28

Sample

Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral29

Sample

Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral30

Sample

Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral31

Sample

Farrago 2.1.5/Open Gatekeeper friendly:rsrc

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Report Analysis Logs

General

Target
Farrago 2.1.5/.background/bg.png:com.apple.quarantine
Size 22B
Sample260804-rmvkessemd
SHA256 028bbbaa4e930a80e219115e7d36233868f128d3fed2c5c8c3b8ffbbb408fbd2
MD5 5ddf174686650e468949ffbd37da2375
SHA1 f066f2210fa52581c6b3977096d0add2eac87614
SHA512 71663216854a30de892a4f9150cbef9890c1e773b66dcdb91d5f0f69a3be2762d89d6da67bc84cd03c4e348dbad79da332330e008d532276bfd19634df87b854
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/.background/bg.png:com.apple.quarantine\""
1⤵
PID:494

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/.background/bg.png:com.apple.quarantine\""
1⤵
PID:494

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Farrago 2.1.5/.background/bg.png:com.apple.quarantine"
1⤵
PID:494
- /bin/zsh
  /bin/zsh -c "/Users/run/Farrago 2.1.5/.background/bg.png:com.apple.quarantine"
  2⤵
  PID:495
- /Users/run/Farrago
  /Users/run/Farrago 2.1.5/.background/bg.png:com.apple.quarantine
  2⤵
  PID:495

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:510

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:510

/usr/libexec/xpcproxy
xpcproxy com.apple.diagnosticd
1⤵
PID:511

/usr/libexec/diagnosticd
/usr/libexec/diagnosticd
1⤵
PID:511

/usr/libexec/xpcproxy
xpcproxy com.apple.newsyslog
1⤵
PID:512

/usr/sbin/newsyslog
/usr/sbin/newsyslog
1⤵
PID:512

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads