Overview
overview
4Static
static
1Farrago 2....2).dmg
macos-10.15-amd64
1Farrago 2...._store
macos-10.15-amd64
1Farrago 2....n.icns
macos-10.15-amd64
1Farrago 2....ate#ps
macos-10.15-amd64
1Farrago 2....e.macl
macos-10.15-amd64
1Farrago 2....antine
macos-10.15-amd64
1Farrago 2....bg.png
macos-10.15-amd64
1Farrago 2....ate#ps
macos-10.15-amd64
1Farrago 2....e.macl
macos-10.15-amd64
1Farrago 2....ertags
macos-10.15-amd64
1Farrago 2....antine
macos-10.15-amd64
1Farrago 2....lp.txt
macos-10.15-amd64
1Farrago 2....b7ynxa
macos-10.15-amd64
1Farrago 2....t:rsrc
macos-10.15-amd64
1Farrago 2....T].dmg
macos-10.15-amd64
1Farrago 2....es.nib
macos-10.15-amd64
4Farrago 2....es.nib
macos-10.15-amd64
4Farrago 2....am.wav
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....il.m4a
macos-10.15-amd64
4Farrago 2....il.m4a
macos-10.15-amd64
4Farrago 2....op.svg
macos-10.15-amd64
4Farrago 2....ew.svg
macos-10.15-amd64
4Farrago 2....le.svg
macos-10.15-amd64
4Farrago 2....ervice
macos-10.15-amd64
1Farrago 2....ate#ps
macos-10.15-amd64
1Farrago 2....hgz4we
macos-10.15-amd64
1Farrago 2....y:rsrc
macos-10.15-amd64
1Analysis
- max time kernel
597s - max time network
905s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
04/08/2026, 14:19
Static task
static1
Behavioral task
behavioral1
Sample
Farrago 2.1.5 [TNT](2).dmg
Resource
macos-20250619-en
Behavioral task
behavioral2
Sample
Farrago 2.1.5/.ds_store
Resource
macos-20250619-en
Behavioral task
behavioral3
Sample
Farrago 2.1.5/.VolumeIcon.icns
Resource
macos-20250619-en
Behavioral task
behavioral4
Sample
Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps
Resource
macos-20250619-en
Behavioral task
behavioral5
Sample
Farrago 2.1.5/.VolumeIcon.icns:com.apple.macl
Resource
macos-20250619-en
Behavioral task
behavioral6
Sample
Farrago 2.1.5/.VolumeIcon.icns:com.apple.quarantine
Resource
macos-20250619-en
Behavioral task
behavioral7
Sample
Farrago 2.1.5/.background/bg.png
Resource
macos-20250619-en
Behavioral task
behavioral8
Sample
Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps
Resource
macos-20250619-en
Behavioral task
behavioral9
Sample
Farrago 2.1.5/.background/bg.png:com.apple.macl
Resource
macos-20250619-en
Behavioral task
behavioral10
Sample
Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags
Resource
macos-20250619-en
Behavioral task
behavioral11
Sample
Farrago 2.1.5/.background/bg.png:com.apple.quarantine
Resource
macos-20250619-en
Behavioral task
behavioral12
Sample
Farrago 2.1.5/Help.txt
Resource
macos-20250619-en
Behavioral task
behavioral13
Sample
Farrago 2.1.5/Help.txt:com.apple.metadata_kmdlabel_dnftphl3a2xxyn2rmlkjb7ynxa
Resource
macos-20250619-en
Behavioral task
behavioral14
Sample
Farrago 2.1.5/Help.txt:rsrc
Resource
macos-20250619-en
Behavioral task
behavioral15
Sample
Farrago 2.1.5/Manual install/Farrago 2.1.5 [TNT].dmg
Resource
macos-20250619-en
Behavioral task
behavioral16
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/FGControllerPreferences.nib
Resource
macos-20250619-en
Behavioral task
behavioral17
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/FGPreferences.nib
Resource
macos-20250619-en
Behavioral task
behavioral18
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/ReverseScream.wav
Resource
macos-20250619-en
Behavioral task
behavioral19
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral20
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral21
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral22
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral23
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a
Resource
macos-20250619-en
Behavioral task
behavioral24
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a
Resource
macos-20250619-en
Behavioral task
behavioral25
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.loop.svg
Resource
macos-20250619-en
Behavioral task
behavioral26
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.preview.svg
Resource
macos-20250619-en
Behavioral task
behavioral27
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/xmark.circle.svg
Resource
macos-20250619-en
Behavioral task
behavioral28
Sample
Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service
Resource
macos-20250619-en
Behavioral task
behavioral29
Sample
Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps
Resource
macos-20250619-en
Behavioral task
behavioral30
Sample
Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we
Resource
macos-20250619-en
Behavioral task
behavioral31
Sample
Farrago 2.1.5/Open Gatekeeper friendly:rsrc
Resource
macos-20250619-en
General
- Target Farrago 2.1.5/.background/bg.png
- Size 86KB
- Sample260804-rmvkessemd
- SHA256 9767cbc6f03421fb8abb858eae12fd63790f99e2344d907ef0986ea8330b439c
- MD5 ccccdbebe8a63d52a5634c575562a7ef
- SHA1 f22b7e39aa29a01e5784d08aae8557127f0bee75
- SHA512 df62a14b093774928a50d69008fc5cd9d52088660d77abd6a457fe24d0413db62e6cd7245d4edabc035d41a0dcaced0cc38a2512bc2e2820b353451de72229e1
- SSDEEP 1536:naqDHpS/84VwZCQDfNucLv3Kk8OP3B++9d78yrtCsZ5an0QhIiRs:nO84uCQpr8KNddVHoa
- TLSH T13A931267E764773FF8E26777DABC46FC5C5B2616BB70E49014A0A3902A88813B50E0DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/.background/bg.png\""1⤵PID:496
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/.background/bg.png\""1⤵PID:496
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Farrago 2.1.5/.background/bg.png"1⤵PID:496
-
/bin/zsh/bin/zsh -c "/Users/run/Farrago 2.1.5/.background/bg.png"2⤵PID:497
-
-
/Users/run/Farrago/Users/run/Farrago 2.1.5/.background/bg.png2⤵PID:497
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.AccountPolicyHelper1⤵PID:513
-
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper1⤵PID:513
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:514
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:514
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:515
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:515
-
/usr/libexec/xpcproxyxpcproxy com.apple.newsyslog1⤵PID:517
-
/usr/sbin/newsyslog/usr/sbin/newsyslog1⤵PID:517