Analysis
- max time kernel
34s - max time network
40s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
11/08/2026, 00:42
Static task
static1
Behavioral task
behavioral1
Sample
Sapphire
Resource
macos-20250619-en
0 signatures
150 seconds
General
- Target Sapphire
- Size 32.2MB
- Sample260811-a2lsdsscnf
- SHA256 16f74bd8d38125f8aa7e3624a0b97bcc8d8b29fdca5ac595372ba126db1656ab
- MD5 d7eb39916e83bbfe0a09398ca760db44
- SHA1 a9b2af89e779cc5c6ff7e5d734e5bb0f4abe1ddf
- SHA512 110c578394d7b91ea6bbc8eb8eca78fe2596af4a093a60d0a5bdfbea774dd17d65b83fba3b5e10d509dd48d8d541d594ed42ad2fab18f33800874f588567aa7f
- SSDEEP 393216:2INc+pSsG3f/HJJdmxqPGe6v6ftlyHTx:HnufhXmD2Wz
- TLSH T10E77AE3312EC5838C096B2BC1E5FAAB13166F5B00231B59D7E55823A2E61DE0573FF66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Sapphire\""1⤵PID:485
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Sapphire\""1⤵PID:485
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Sapphire1⤵PID:485
-
/bin/zsh/bin/zsh -c /Users/run/Sapphire2⤵PID:486
-
-
/Users/run/Sapphire/Users/run/Sapphire2⤵PID:486
-
-
/usr/bin/bzip2/usr/bin/bzip2 -f /var/log/wifi.log.01⤵PID:518