Overview
overview
4Static
static
1Farrago 2....2).dmg
macos-10.15-amd64
1Farrago 2...._store
macos-10.15-amd64
1Farrago 2....n.icns
macos-10.15-amd64
1Farrago 2....ate#ps
macos-10.15-amd64
1Farrago 2....e.macl
macos-10.15-amd64
1Farrago 2....antine
macos-10.15-amd64
1Farrago 2....bg.png
macos-10.15-amd64
1Farrago 2....ate#ps
macos-10.15-amd64
1Farrago 2....e.macl
macos-10.15-amd64
1Farrago 2....ertags
macos-10.15-amd64
1Farrago 2....antine
macos-10.15-amd64
1Farrago 2....lp.txt
macos-10.15-amd64
1Farrago 2....b7ynxa
macos-10.15-amd64
1Farrago 2....t:rsrc
macos-10.15-amd64
1Farrago 2....T].dmg
macos-10.15-amd64
1Farrago 2....es.nib
macos-10.15-amd64
4Farrago 2....es.nib
macos-10.15-amd64
4Farrago 2....am.wav
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....il.m4a
macos-10.15-amd64
4Farrago 2....il.m4a
macos-10.15-amd64
4Farrago 2....op.svg
macos-10.15-amd64
4Farrago 2....ew.svg
macos-10.15-amd64
4Farrago 2....le.svg
macos-10.15-amd64
4Farrago 2....ervice
macos-10.15-amd64
1Farrago 2....ate#ps
macos-10.15-amd64
1Farrago 2....hgz4we
macos-10.15-amd64
1Farrago 2....y:rsrc
macos-10.15-amd64
1Analysis
- max time kernel
364s - max time network
903s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
04/08/2026, 14:19
Static task
static1
Behavioral task
behavioral1
Sample
Farrago 2.1.5 [TNT](2).dmg
Resource
macos-20250619-en
Behavioral task
behavioral2
Sample
Farrago 2.1.5/.ds_store
Resource
macos-20250619-en
Behavioral task
behavioral3
Sample
Farrago 2.1.5/.VolumeIcon.icns
Resource
macos-20250619-en
Behavioral task
behavioral4
Sample
Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps
Resource
macos-20250619-en
Behavioral task
behavioral5
Sample
Farrago 2.1.5/.VolumeIcon.icns:com.apple.macl
Resource
macos-20250619-en
Behavioral task
behavioral6
Sample
Farrago 2.1.5/.VolumeIcon.icns:com.apple.quarantine
Resource
macos-20250619-en
Behavioral task
behavioral7
Sample
Farrago 2.1.5/.background/bg.png
Resource
macos-20250619-en
Behavioral task
behavioral8
Sample
Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps
Resource
macos-20250619-en
Behavioral task
behavioral9
Sample
Farrago 2.1.5/.background/bg.png:com.apple.macl
Resource
macos-20250619-en
Behavioral task
behavioral10
Sample
Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags
Resource
macos-20250619-en
Behavioral task
behavioral11
Sample
Farrago 2.1.5/.background/bg.png:com.apple.quarantine
Resource
macos-20250619-en
Behavioral task
behavioral12
Sample
Farrago 2.1.5/Help.txt
Resource
macos-20250619-en
Behavioral task
behavioral13
Sample
Farrago 2.1.5/Help.txt:com.apple.metadata_kmdlabel_dnftphl3a2xxyn2rmlkjb7ynxa
Resource
macos-20250619-en
Behavioral task
behavioral14
Sample
Farrago 2.1.5/Help.txt:rsrc
Resource
macos-20250619-en
Behavioral task
behavioral15
Sample
Farrago 2.1.5/Manual install/Farrago 2.1.5 [TNT].dmg
Resource
macos-20250619-en
Behavioral task
behavioral16
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/FGControllerPreferences.nib
Resource
macos-20250619-en
Behavioral task
behavioral17
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/FGPreferences.nib
Resource
macos-20250619-en
Behavioral task
behavioral18
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/ReverseScream.wav
Resource
macos-20250619-en
Behavioral task
behavioral19
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral20
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral21
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral22
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral23
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a
Resource
macos-20250619-en
Behavioral task
behavioral24
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a
Resource
macos-20250619-en
Behavioral task
behavioral25
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.loop.svg
Resource
macos-20250619-en
Behavioral task
behavioral26
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.preview.svg
Resource
macos-20250619-en
Behavioral task
behavioral27
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/xmark.circle.svg
Resource
macos-20250619-en
Behavioral task
behavioral28
Sample
Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service
Resource
macos-20250619-en
Behavioral task
behavioral29
Sample
Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps
Resource
macos-20250619-en
Behavioral task
behavioral30
Sample
Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we
Resource
macos-20250619-en
Behavioral task
behavioral31
Sample
Farrago 2.1.5/Open Gatekeeper friendly:rsrc
Resource
macos-20250619-en
General
- Target Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we
- Size 137B
- Sample260804-rmvkessemd
- SHA256 68809c5e5a3bdf57cc4510ab51c5af0a5017275b0cce04873994202194cebf15
- MD5 e04d6115229cecf0a2a320b7fbcc8eb2
- SHA1 c3aa3646877d4cbf4866e21b0b8714a32024118c
- SHA512 9ad3f3c0794caa6352dfa68638d48d176255bbf11760cccb5dc3d6088a04547b33acb85aaa0ff8a61f33704414b9cb87ea7670964a3be99251796dd5779082e3
- TLSH T16CC02B7CC1380F0BC44F58D06BDE0E412B81B42201BC0BB47A6F29559C0859106DBCDF
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we\""1⤵PID:496
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we\""1⤵PID:496
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we"1⤵PID:496
-
/bin/zsh/bin/zsh -c "/Users/run/Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we"2⤵PID:498
-
-
/Users/run/Farrago/Users/run/Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we2⤵PID:498
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.AccountPolicyHelper1⤵PID:513
-
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper1⤵PID:513
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:514
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:514
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:515
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:515