fe3875b849855a5b29f469c6e9c73120942e369c6d91c4708e2efb39351fba49 | Triage™

Login
Reports

Overview

overview

4

Static

static

1

Farrago 2....2).dmg

macos-10.15-amd64

1

Farrago 2...._store

macos-10.15-amd64

1

Farrago 2....n.icns

macos-10.15-amd64

1

Farrago 2....ate#ps

macos-10.15-amd64

1

Farrago 2....e.macl

macos-10.15-amd64

1

Farrago 2....antine

macos-10.15-amd64

1

Farrago 2....bg.png

macos-10.15-amd64

1

Farrago 2....ate#ps

macos-10.15-amd64

1

Farrago 2....e.macl

macos-10.15-amd64

1

Farrago 2....ertags

macos-10.15-amd64

1

Farrago 2....antine

macos-10.15-amd64

1

Farrago 2....lp.txt

macos-10.15-amd64

1

Farrago 2....b7ynxa

macos-10.15-amd64

1

Farrago 2....t:rsrc

macos-10.15-amd64

1

Farrago 2....T].dmg

macos-10.15-amd64

1

Farrago 2....es.nib

macos-10.15-amd64

4

Farrago 2....es.nib

macos-10.15-amd64

4

Farrago 2....am.wav

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....adata/

macos-10.15-amd64

4

Farrago 2....il.m4a

macos-10.15-amd64

4

Farrago 2....il.m4a

macos-10.15-amd64

4

Farrago 2....op.svg

macos-10.15-amd64

4

Farrago 2....ew.svg

macos-10.15-amd64

4

Farrago 2....le.svg

macos-10.15-amd64

4

Farrago 2....ervice

macos-10.15-amd64

1

Farrago 2....ate#ps

macos-10.15-amd64

1

Farrago 2....hgz4we

macos-10.15-amd64

1

Farrago 2....y:rsrc

macos-10.15-amd64

1

Analysis

max time kernel
596s
max time network
778s
platform
macos-10.15_amd64
resource
macos-20250619-en
resource tags

arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
04/08/2026, 14:19

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Farrago 2.1.5 [TNT](2).dmg

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

Farrago 2.1.5/.ds_store

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

Farrago 2.1.5/.VolumeIcon.icns

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.macl

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

Farrago 2.1.5/.VolumeIcon.icns:com.apple.quarantine

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

Farrago 2.1.5/.background/bg.png

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral8

Sample

Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

Farrago 2.1.5/.background/bg.png:com.apple.macl

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

Farrago 2.1.5/.background/bg.png:com.apple.quarantine

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

Farrago 2.1.5/Help.txt

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral13

Sample

Farrago 2.1.5/Help.txt:com.apple.metadata_kmdlabel_dnftphl3a2xxyn2rmlkjb7ynxa

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

Farrago 2.1.5/Help.txt:rsrc

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral15

Sample

Farrago 2.1.5/Manual install/Farrago 2.1.5 [TNT].dmg

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral16

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/FGControllerPreferences.nib

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral17

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/FGPreferences.nib

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral18

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/ReverseScream.wav

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral19

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral20

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral21

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral22

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral23

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral24

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral25

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.loop.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral26

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.preview.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral27

Sample

Farrago 2.1.5/Farrago.app/Contents/Resources/xmark.circle.svg

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral28

Sample

Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral29

Sample

Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral30

Sample

Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral31

Sample

Farrago 2.1.5/Open Gatekeeper friendly:rsrc

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Report Analysis Logs

General

Target
Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps
Size 16B
Sample260804-rmvkessemd
SHA256 fe3875b849855a5b29f469c6e9c73120942e369c6d91c4708e2efb39351fba49
MD5 d8958234ceceefa7384b401e23f240aa
SHA1 1e0326a42380ad1b8e493c360b38f947f376dc73
SHA512 fab0e92069ed34b964c4b10609c78302a9b94b6d6a598050cf4441a21ffb0653883307088b6225fe6a2106a8b2e451c8762754942cfd6067ca516939f2bec13a
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps\""
1⤵
PID:500

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps\""
1⤵
PID:500

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps"
1⤵
PID:500
- /bin/zsh
  /bin/zsh -c "/Users/run/Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps"
  2⤵
  PID:501
- /Users/run/Farrago
  /Users/run/Farrago "2.1.5/.background/bg.png:com.apple.lastuseddate#ps"
  2⤵
  PID:501

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:502

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:502

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:517

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:518

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:529

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:529

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:533

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:533

/usr/libexec/xpcproxy
xpcproxy com.apple.diagnosticd
1⤵
PID:534

/usr/libexec/diagnosticd
/usr/libexec/diagnosticd
1⤵
PID:534

/usr/libexec/xpcproxy
xpcproxy com.apple.newsyslog
1⤵
PID:535

/usr/sbin/newsyslog
/usr/sbin/newsyslog
1⤵
PID:535

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy