2033f39562a37f8d0bc9fd35545f9ec65d328ed3ee01f41225126c349f409137 | Triage™

Login
Reports

Overview

overview

4

Static

static

1

Farrago 2....2).dmg

macos-10.15-amd64

1

Farrago 2...._store

macos-10.15-amd64

1

Farrago 2....n.icns

macos-10.15-amd64

1

Farrago 2....ate#ps

macos-10.15-amd64

1

Farrago 2....e.macl

macos-10.15-amd64

1

Farrago 2....antine

macos-10.15-amd64

1

Farrago 2....bg.png

macos-10.15-amd64

1

Farrago 2....ate#ps

macos-10.15-amd64

1

Farrago 2....e.macl

macos-10.15-amd64

1

Farrago 2....ertags

macos-10.15-amd64

1

Farrago 2....antine

macos-10.15-amd64

1

Farrago 2....lp.txt

macos-10.15-amd64

1

Farrago 2....b7ynxa

macos-10.15-amd64

1

Farrago 2....t:rsrc

macos-10.15-amd64

1

Farrago 2....T].dmg

macos-10.15-amd64

1

Farrago 2....es.nib

macos-10.15-amd64

4

Farrago 2....es.nib

macos-10.15-amd64

4

Farrago 2....am.wav

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....il.m4a

macos-10.15-amd64

4

Farrago 2....il.m4a

macos-10.15-amd64

4

Farrago 2....op.svg

macos-10.15-amd64

4

Farrago 2....ew.svg

macos-10.15-amd64

4

Farrago 2....le.svg

macos-10.15-amd64

4

Farrago 2....ervice

macos-10.15-amd64

1

Farrago 2....ate#ps

macos-10.15-amd64

1

Farrago 2....hgz4we

macos-10.15-amd64

1

Farrago 2....y:rsrc

macos-10.15-amd64

1

Analysis

max time kernel
354s
max time network
622s
platform
macos-10.15_amd64
resource
macos-20250619-en
resource tags

arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
04/08/2026, 14:19

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Farrago 2.1.5 [TNT](2).dmg

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

Farrago 2.1.5/.ds_store

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

Farrago 2.1.5/.VolumeIcon.icns

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.macl

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.quarantine

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

Farrago 2.1.5/.background/bg.png

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral8

Sample

Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

Farrago 2.1.5/.background/bg.png:com.apple.macl

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

Farrago 2.1.5/.background/bg.png:com.apple.quarantine

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

Farrago 2.1.5/Help.txt

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral13

Sample

Farrago 2.1.5/Help.txt:com.apple.metadata_kmdlabel_dnftphl3a2xxyn2rmlkjb7ynxa

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

Farrago 2.1.5/Help.txt:rsrc

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral15

Sample

Farrago 2.1.5/Manual install/Farrago 2.1.5 [TNT].dmg

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral16

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/FGControllerPreferences.nib

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral17

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/FGPreferences.nib

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral18

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/ReverseScream.wav

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral19

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral20

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral21

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral22

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral23

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral24

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral25

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.loop.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral26

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.preview.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral27

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/xmark.circle.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral28

Sample

Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral29

Sample

Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral30

Sample

Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral31

Sample

Farrago 2.1.5/Open Gatekeeper friendly:rsrc

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Report Analysis Logs

General

Target
Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps
Size 16B
Sample260804-rmvkessemd
SHA256 2033f39562a37f8d0bc9fd35545f9ec65d328ed3ee01f41225126c349f409137
MD5 e108157ccb4b465cede9a4f461865851
SHA1 b483eb0a36292d0087212c9e810749c6207761ee
SHA512 dfeaca9d8c8a408572b9d98953fcc45d8c60c5ad3496d364d761e70f958327fd4a72d90695796db68b7e6a929090b2c7217c4b32fadfbb72000a42ce08fc69fd
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps\""
1⤵
PID:463

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps\""
1⤵
PID:463

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps"
1⤵
PID:463
- /bin/zsh
  /bin/zsh -c "/Users/run/Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps"
  2⤵
  PID:465
- /Users/run/Farrago
  /Users/run/Farrago 2.1.5/Open Gatekeeper "friendly:com.apple.lastuseddate#ps"
  2⤵
  PID:465

/usr/libexec/xpcproxy
xpcproxy com.apple.nsurlstoraged
1⤵
PID:493

/usr/libexec/nsurlstoraged
/usr/libexec/nsurlstoraged --privileged
1⤵
PID:493

/usr/libexec/xpcproxy
xpcproxy com.apple.StreamingUnzipService 197
1⤵
PID:494

/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
1⤵
PID:494

/usr/libexec/xpcproxy
xpcproxy com.apple.diagnosticd
1⤵
PID:503

/usr/libexec/diagnosticd
/usr/libexec/diagnosticd
1⤵
PID:503

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy