Analysis
- max time kernel
94s - max time network
107s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
18/08/2026, 06:15
Static task
static1
Behavioral task
behavioral1
Sample
Tuck-1.0.24.dmg
Resource
macos-20250619-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Tuck 1.0.24/Tuck.app/Contents/MacOS/Tuck
Resource
macos-20250619-en
0 signatures
150 seconds
General
- Target Tuck-1.0.24.dmg
- Size 6.4MB
- Sample260818-g1cxesff95
- SHA256 275f9a34457d172b740529108457a859ef3bddc8a8e1ef980e8443d5ba253518
- MD5 60706ca09082d5ce56e859a09b89a01f
- SHA1 e16ce2e226c2ba1da77b343befc0ca889865c4c1
- SHA512 ab9c980ec35afba3137fca99ab822b450738d0dac87ce956c25998d9483b16f34b8540d15e7edfc0ecd5a603b57382cef45194e4e29a2d490ce0f09fd3285c5e
- SSDEEP 196608:vQV8QViV0f89nbW9j84oCbOq84oC1VJg7:KiV1nbWR8wOq84VJE
- TLSH T1BD66337E472A3458FC116AB847B26AE0CDBFE64F006B97CD608D74D466B5F13722C8A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"open /Volumes/Tuck\\ 1.0.24/Tuck.app\""1⤵PID:520
-
/bin/bashsh -c "sudo /bin/zsh -c \"open /Volumes/Tuck\\ 1.0.24/Tuck.app\""1⤵PID:520
-
/usr/bin/sudosudo /bin/zsh -c "open /Volumes/Tuck\\ 1.0.24/Tuck.app"1⤵PID:520
-
/bin/zsh/bin/zsh -c "open /Volumes/Tuck\\ 1.0.24/Tuck.app"2⤵PID:521
-
-
/usr/bin/openopen "/Volumes/Tuck 1.0.24/Tuck.app"2⤵PID:521
-