f3f12c5e43f532a6660bfb707f2066ae993538025a6a4bc52a90e58a27a8134e | Triage™

Login
Reports

Overview

overview

4

Static

static

1

Farrago 2....2).dmg

macos-10.15-amd64

1

Farrago 2...._store

macos-10.15-amd64

1

Farrago 2....n.icns

macos-10.15-amd64

1

Farrago 2....ate#ps

macos-10.15-amd64

1

Farrago 2....e.macl

macos-10.15-amd64

1

Farrago 2....antine

macos-10.15-amd64

1

Farrago 2....bg.png

macos-10.15-amd64

1

Farrago 2....ate#ps

macos-10.15-amd64

1

Farrago 2....e.macl

macos-10.15-amd64

1

Farrago 2....ertags

macos-10.15-amd64

1

Farrago 2....antine

macos-10.15-amd64

1

Farrago 2....lp.txt

macos-10.15-amd64

1

Farrago 2....b7ynxa

macos-10.15-amd64

1

Farrago 2....t:rsrc

macos-10.15-amd64

1

Farrago 2....T].dmg

macos-10.15-amd64

1

Farrago 2....es.nib

macos-10.15-amd64

4

Farrago 2....es.nib

macos-10.15-amd64

4

Farrago 2....am.wav

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....il.m4a

macos-10.15-amd64

4

Farrago 2....il.m4a

macos-10.15-amd64

4

Farrago 2....op.svg

macos-10.15-amd64

4

Farrago 2....ew.svg

macos-10.15-amd64

4

Farrago 2....le.svg

macos-10.15-amd64

4

Farrago 2....ervice

macos-10.15-amd64

1

Farrago 2....ate#ps

macos-10.15-amd64

1

Farrago 2....hgz4we

macos-10.15-amd64

1

Farrago 2....y:rsrc

macos-10.15-amd64

1

Analysis

max time kernel
596s
max time network
905s
platform
macos-10.15_amd64
resource
macos-20250619-en
resource tags

arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
04/08/2026, 14:19

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Farrago 2.1.5 [TNT](2).dmg

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

Farrago 2.1.5/.ds_store

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

Farrago 2.1.5/.VolumeIcon.icns

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.macl

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.quarantine

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

Farrago 2.1.5/.background/bg.png

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral8

Sample

Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

Farrago 2.1.5/.background/bg.png:com.apple.macl

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

Farrago 2.1.5/.background/bg.png:com.apple.quarantine

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

Farrago 2.1.5/Help.txt

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral13

Sample

Farrago 2.1.5/Help.txt:com.apple.metadata_kmdlabel_dnftphl3a2xxyn2rmlkjb7ynxa

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

Farrago 2.1.5/Help.txt:rsrc

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral15

Sample

Farrago 2.1.5/Manual install/Farrago 2.1.5 [TNT].dmg

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral16

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/FGControllerPreferences.nib

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral17

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/FGPreferences.nib

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral18

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/ReverseScream.wav

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral19

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral20

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral21

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral22

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral23

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral24

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral25

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.loop.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral26

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.preview.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral27

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/xmark.circle.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral28

Sample

Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral29

Sample

Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral30

Sample

Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral31

Sample

Farrago 2.1.5/Open Gatekeeper friendly:rsrc

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Report Analysis Logs

General

Target
Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps
Size 16B
Sample260804-rmvkessemd
SHA256 f3f12c5e43f532a6660bfb707f2066ae993538025a6a4bc52a90e58a27a8134e
MD5 19224b829285e4dea082fb89560695d2
SHA1 a1660f0ea715319e9dd8c38689bbdca4fecfa57a
SHA512 4c1fbb792f5d0c37cb18033f537df2ccdf0901cb6a840e371089897fd161a64eac061dd03cc270f5bb0002d16c177be67910bb18c91808c1259debe4212d935f
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps\""
1⤵
PID:497

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps\""
1⤵
PID:497

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps"
1⤵
PID:497
- /bin/zsh
  /bin/zsh -c "/Users/run/Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps"
  2⤵
  PID:498
- /Users/run/Farrago
  /Users/run/Farrago "2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps"
  2⤵
  PID:498

/usr/libexec/xpcproxy
xpcproxy com.apple.nsurlstoraged
1⤵
PID:508

/usr/libexec/nsurlstoraged
/usr/libexec/nsurlstoraged --privileged
1⤵
PID:508

/usr/libexec/xpcproxy
xpcproxy com.apple.StreamingUnzipService 172
1⤵
PID:513

/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
1⤵
PID:513

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:514

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:515

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:517

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:517

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:529

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:529

/usr/libexec/xpcproxy
xpcproxy com.apple.diagnosticd
1⤵
PID:530

/usr/libexec/diagnosticd
/usr/libexec/diagnosticd
1⤵
PID:530

/usr/libexec/xpcproxy
xpcproxy com.apple.newsyslog
1⤵
PID:531

/usr/sbin/newsyslog
/usr/sbin/newsyslog
1⤵
PID:531

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy