Analysis
- max time kernel
67s - max time network
128s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
14/08/2026, 18:25
Static task
static1
Behavioral task
behavioral1
Sample
docusign.dmg
Resource
macos-20250619-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
FleetDeck Agent Installer/FleetDeck Agent Installer.pkg
Resource
macos-20250619-en
0 signatures
150 seconds
General
- Target FleetDeck Agent Installer/FleetDeck Agent Installer.pkg
- Size 5.2MB
- Sample260814-w25fdsbc67
- SHA256 e460d2866a36e72f51c4e0a3213e5d465ffcf44ca475b0c3978aa1c40ed49c2a
- MD5 f107d639f0c879cb0324dcf316559cc3
- SHA1 723b7752f63796290da0e4f3d059e86d6e8da904
- SHA512 b6842b5557bfefd42917817e534450ad466f248d4afd9dcc38c539d03083b7fd8dc9a25c58727e7d3de202189818ed2ef1f70de2832a44c2c0614b9771558c48
- SSDEEP 98304:bEDn3B/RLIrAZWRK6/yuosCPY9bpXC7zv0MwbhnElihP2ljblyhMi:QRZL9Hvy9bRCHv8ElsP25bgX
- TLSH T1BF4633CFCEFD5A24E5274FB68018D1878E36D41A76A6D071F4881AD2F58E1EBCE40276
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"installer -pkg /Users/run/setup.pkg -target /\""1⤵PID:464
-
/bin/bashsh -c "sudo /bin/zsh -c \"installer -pkg /Users/run/setup.pkg -target /\""1⤵PID:464
-
/usr/bin/sudosudo /bin/zsh -c "installer -pkg /Users/run/setup.pkg -target /"1⤵PID:464
-
/bin/zsh/bin/zsh -c "installer -pkg /Users/run/setup.pkg -target /"2⤵PID:466
-
-
/usr/sbin/installerinstaller -pkg /Users/run/setup.pkg -target /2⤵PID:466
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:493
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:493
-
/usr/libexec/xpcproxyxpcproxy com.apple.StreamingUnzipService 1981⤵PID:494
-
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService1⤵PID:494