Overview

overview

1

Static

static

1

Echo Live....hanger

macos-10.15-amd64

1

Analysis

  • user interaction
    yes
  • max time kernel
    88s
  • max time network
    89s
  • platform
    macos-10.15_amd64
  • resource
    macos-20250619-en
  • resource tags

    arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    10/08/2026, 11:00

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Echo Live.app/Contents/MacOS/live-voice-changer
  • Size 64.6MB
  • Sample260810-m4d7jsstas
  • SHA256 a8c2e38c9e17ea3b9daff99be4b985b515751b1a77a30a9af97de5341509ba11
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Echo Live.app/Contents/MacOS/live-voice-changer\""
    1⤵
      PID:506
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Echo Live.app/Contents/MacOS/live-voice-changer\""
      1⤵
        PID:506
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/Echo Live.app/Contents/MacOS/live-voice-changer"
        1⤵
          PID:506
          • /bin/zsh
            /bin/zsh -c "/Users/run/Echo Live.app/Contents/MacOS/live-voice-changer"
            2⤵
              PID:509
            • /Users/run/Echo
              /Users/run/Echo Live.app/Contents/MacOS/live-voice-changer
              2⤵
                PID:509
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.iCal.CalendarNC 299
              1⤵
                PID:529
              • /usr/libexec/xpcproxy
                xpcproxy com.apple.ncplugin.stocks 299
                1⤵
                  PID:530
                • /usr/libexec/xpcproxy
                  xpcproxy com.apple.ncplugin.weather 299
                  1⤵
                    PID:531
                  • /System/Applications/Calendar.app/Contents/PlugIns/com.apple.iCal.CalendarNC.appex/Contents/MacOS/com.apple.iCal.CalendarNC
                    /System/Applications/Calendar.app/Contents/PlugIns/com.apple.iCal.CalendarNC.appex/Contents/MacOS/com.apple.iCal.CalendarNC
                    1⤵
                      PID:529
                    • /System/Library/CoreServices/StocksWidget.app/Contents/PlugIns/com.apple.ncplugin.stocks.appex/Contents/MacOS/com.apple.ncplugin.stocks
                      /System/Library/CoreServices/StocksWidget.app/Contents/PlugIns/com.apple.ncplugin.stocks.appex/Contents/MacOS/com.apple.ncplugin.stocks
                      1⤵
                        PID:530
                      • /System/Library/CoreServices/Weather.app/Contents/PlugIns/com.apple.ncplugin.weather.appex/Contents/MacOS/com.apple.ncplugin.weather
                        /System/Library/CoreServices/Weather.app/Contents/PlugIns/com.apple.ncplugin.weather.appex/Contents/MacOS/com.apple.ncplugin.weather
                        1⤵
                          PID:531
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.Safari.2028
                          1⤵
                            PID:535
                          • /Applications/Safari.app/Contents/MacOS/Safari
                            /Applications/Safari.app/Contents/MacOS/Safari
                            1⤵
                              PID:535
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.Safari.History
                              1⤵
                                PID:536
                              • /System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
                                /System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
                                1⤵
                                  PID:536
                                • /usr/libexec/xpcproxy
                                  xpcproxy com.apple.WebKit.WebContent.5ED3B46E-8149-4672-B217-C20B125B4558 535
                                  1⤵
                                    PID:537
                                  • /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                    /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                    1⤵
                                      PID:537
                                    • /usr/libexec/xpcproxy
                                      xpcproxy com.apple.SafariLaunchAgent
                                      1⤵
                                        PID:541
                                      • /Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
                                        /Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
                                        1⤵
                                          PID:541
                                        • /usr/libexec/xpcproxy
                                          xpcproxy com.apple.WebKit.WebContent.9EAE10C1-175F-49AA-9C6B-DD869AAD7A1C 535
                                          1⤵
                                            PID:542
                                          • /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                            /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                            1⤵
                                              PID:542
                                            • /usr/libexec/xpcproxy
                                              xpcproxy com.apple.Safari.SearchHelper 535
                                              1⤵
                                                PID:543
                                              • /System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper
                                                /System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper
                                                1⤵
                                                  PID:543
                                                • /usr/libexec/xpcproxy
                                                  xpcproxy com.apple.Safari.SafeBrowsing.Service
                                                  1⤵
                                                    PID:544
                                                  • /System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service
                                                    /System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service
                                                    1⤵
                                                      PID:544
                                                    • /usr/libexec/xpcproxy
                                                      xpcproxy com.apple.WebKit.WebContent.0BDC57EA-8590-4D7A-9B3B-CAB6D2BF81B3 535
                                                      1⤵
                                                        PID:545
                                                      • /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                                        /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                                        1⤵
                                                          PID:545
                                                        • /usr/libexec/xpcproxy
                                                          xpcproxy com.apple.WebKit.WebContent.4C329887-346D-4A8F-9C75-B8A57710CA08 535
                                                          1⤵
                                                            PID:546
                                                          • /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                                            /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                                            1⤵
                                                              PID:546

                                                            Network

                                                                  MITRE ATT&CK Matrix

                                                                  Replay Monitor

                                                                  Loading Replay Monitor...

                                                                  Downloads

                                                                  2529545429CE075A4E64DE7DAA3D4C27
                                                                  • Path /Users/run/Library/Safari/Favicon Cache/favicons/2529545429CE075A4E64DE7DAA3D4C27
                                                                  • Size 5KB
                                                                  • SHA256 6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  malware,osx,url_expression
                                                                  • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/malware,osx,url_expression
                                                                  • Size 84KB
                                                                  • SHA256 4d99da046575c0046f50054115e7e54b62ae7f609a87a3c54f1143f57c851e6e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  social_engineering,osx,url_expression
                                                                  • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/social_engineering,osx,url_expression
                                                                  • Size 17.6MB
                                                                  • SHA256 b35185e0d00b982f00deb0dddef1aeafa3f797e34de59b6f40a32df680c0df54
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  unwanted_software,osx,url_expression
                                                                  • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/unwanted_software,osx,url_expression
                                                                  • Size 118KB
                                                                  • SHA256 66876d250549f74de2ec715d9e344bc5d9a624c73c7ce26da80a67632380908a
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  mdsDirectory.db
                                                                  • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari//mds/mdsDirectory.db
                                                                  • Size 47KB
                                                                  • SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  mdsObject.db
                                                                  • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari//mds/mdsObject.db
                                                                  • Size 4KB
                                                                  • SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download