Overview
overview
4Static
static
1Farrago 2....2).dmg
macos-10.15-amd64
1Farrago 2...._store
macos-10.15-amd64
1Farrago 2....n.icns
macos-10.15-amd64
1Farrago 2....ate#ps
macos-10.15-amd64
1Farrago 2....e.macl
macos-10.15-amd64
1Farrago 2....antine
macos-10.15-amd64
1Farrago 2....bg.png
macos-10.15-amd64
1Farrago 2....ate#ps
macos-10.15-amd64
1Farrago 2....e.macl
macos-10.15-amd64
1Farrago 2....ertags
macos-10.15-amd64
1Farrago 2....antine
macos-10.15-amd64
1Farrago 2....lp.txt
macos-10.15-amd64
1Farrago 2....b7ynxa
macos-10.15-amd64
1Farrago 2....t:rsrc
macos-10.15-amd64
1Farrago 2....T].dmg
macos-10.15-amd64
1Farrago 2....es.nib
macos-10.15-amd64
4Farrago 2....es.nib
macos-10.15-amd64
4Farrago 2....am.wav
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....il.m4a
macos-10.15-amd64
4Farrago 2....il.m4a
macos-10.15-amd64
4Farrago 2....op.svg
macos-10.15-amd64
4Farrago 2....ew.svg
macos-10.15-amd64
4Farrago 2....le.svg
macos-10.15-amd64
4Farrago 2....ervice
macos-10.15-amd64
1Farrago 2....ate#ps
macos-10.15-amd64
1Farrago 2....hgz4we
macos-10.15-amd64
1Farrago 2....y:rsrc
macos-10.15-amd64
1Analysis
- max time kernel
346s - max time network
643s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
04/08/2026, 14:19
Static task
static1
Behavioral task
behavioral1
Sample
Farrago 2.1.5 [TNT](2).dmg
Resource
macos-20250619-en
Behavioral task
behavioral2
Sample
Farrago 2.1.5/.ds_store
Resource
macos-20250619-en
Behavioral task
behavioral3
Sample
Farrago 2.1.5/.VolumeIcon.icns
Resource
macos-20250619-en
Behavioral task
behavioral4
Sample
Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps
Resource
macos-20250619-en
Behavioral task
behavioral5
Sample
Farrago 2.1.5/.VolumeIcon.icns:com.apple.macl
Resource
macos-20250619-en
Behavioral task
behavioral6
Sample
Farrago 2.1.5/.VolumeIcon.icns:com.apple.quarantine
Resource
macos-20250619-en
Behavioral task
behavioral7
Sample
Farrago 2.1.5/.background/bg.png
Resource
macos-20250619-en
Behavioral task
behavioral8
Sample
Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps
Resource
macos-20250619-en
Behavioral task
behavioral9
Sample
Farrago 2.1.5/.background/bg.png:com.apple.macl
Resource
macos-20250619-en
Behavioral task
behavioral10
Sample
Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags
Resource
macos-20250619-en
Behavioral task
behavioral11
Sample
Farrago 2.1.5/.background/bg.png:com.apple.quarantine
Resource
macos-20250619-en
Behavioral task
behavioral12
Sample
Farrago 2.1.5/Help.txt
Resource
macos-20250619-en
Behavioral task
behavioral13
Sample
Farrago 2.1.5/Help.txt:com.apple.metadata_kmdlabel_dnftphl3a2xxyn2rmlkjb7ynxa
Resource
macos-20250619-en
Behavioral task
behavioral14
Sample
Farrago 2.1.5/Help.txt:rsrc
Resource
macos-20250619-en
Behavioral task
behavioral15
Sample
Farrago 2.1.5/Manual install/Farrago 2.1.5 [TNT].dmg
Resource
macos-20250619-en
Behavioral task
behavioral16
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/FGControllerPreferences.nib
Resource
macos-20250619-en
Behavioral task
behavioral17
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/FGPreferences.nib
Resource
macos-20250619-en
Behavioral task
behavioral18
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/ReverseScream.wav
Resource
macos-20250619-en
Behavioral task
behavioral19
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral20
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral21
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral22
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral23
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a
Resource
macos-20250619-en
Behavioral task
behavioral24
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a
Resource
macos-20250619-en
Behavioral task
behavioral25
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.loop.svg
Resource
macos-20250619-en
Behavioral task
behavioral26
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.preview.svg
Resource
macos-20250619-en
Behavioral task
behavioral27
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/xmark.circle.svg
Resource
macos-20250619-en
Behavioral task
behavioral28
Sample
Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service
Resource
macos-20250619-en
Behavioral task
behavioral29
Sample
Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps
Resource
macos-20250619-en
Behavioral task
behavioral30
Sample
Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we
Resource
macos-20250619-en
Behavioral task
behavioral31
Sample
Farrago 2.1.5/Open Gatekeeper friendly:rsrc
Resource
macos-20250619-en
General
- Target Farrago 2.1.5/Manual install/Farrago 2.1.5 [TNT].dmg
- Size 43.3MB
- Sample260804-rmvkessemd
- SHA256 d08fb3197f2279c0ffe3f23afe3f4f0fb5fa12dd42b46209b5f4793a3719ef53
- MD5 be0524ffed29662c9071728c5c96eefa
- SHA1 5173b56a141d1a1d5a595d70570b7f2be36ce247
- SHA512 5554309b16b8ae34c79f97c85e99d8787f40582b937de5155f4988aa4d5d020fe3dde3606c88126bfe6f3c3234ac9cb925dd8086f853565124892bb00737bd4e
- SSDEEP 786432:jYzRBJpzsJS4DVy+fO/vaKuBFf2d1C9TrlbGl7Q4GgMSIUf1kctyOc4ZtQU2o:ObJpzsJS4qmBFff9TrytGaDf1hc4Zt7
- TLSH T17AA73333AB71DB14E11F2A3C4BDED7657E718923A345817684113F8227B2AEC86573E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"open /Volumes/Farrago\\ 2.1.5/Farrago.app\""1⤵PID:512
-
/bin/bashsh -c "sudo /bin/zsh -c \"open /Volumes/Farrago\\ 2.1.5/Farrago.app\""1⤵PID:512
-
/usr/bin/sudosudo /bin/zsh -c "open /Volumes/Farrago\\ 2.1.5/Farrago.app"1⤵PID:512
-
/bin/zsh/bin/zsh -c "open /Volumes/Farrago\\ 2.1.5/Farrago.app"2⤵PID:513
-
-
/usr/bin/openopen "/Volumes/Farrago 2.1.5/Farrago.app"2⤵PID:513
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.speech.speechdatainstallerd1⤵PID:522
-
/System/Library/PrivateFrameworks/SpeechObjects.framework/Versions/A/SpeechDataInstallerd.app/Contents/MacOS/SpeechDataInstallerd/System/Library/PrivateFrameworks/SpeechObjects.framework/Versions/A/SpeechDataInstallerd.app/Contents/MacOS/SpeechDataInstallerd1⤵PID:522
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:524
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:524
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:525
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:525