Analysis
- max time kernel
81s - max time network
152s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
18/08/2026, 12:18
Static task
static1
Behavioral task
behavioral1
Sample
TryUncle-mac-5.7.0.dmg
Resource
macos-20250619-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
TryUncle/TryUncle.app/Contents/MacOS/TryUncle
Resource
macos-20250619-en
0 signatures
150 seconds
General
- Target TryUncle/TryUncle.app/Contents/MacOS/TryUncle
- Size 16.0MB
- Sample260818-pg217stsbt
- SHA256 e697b377f414a8f464790e6dcee4dc7bb7aa3fa26ead2bb652e2ba96f3174173
- MD5 7bd117c37dff70c11c2431446cc3cb27
- SHA1 e2c48cbb96d77a0c5aac9bd986b1ad85e10c4ba2
- SHA512 9378d3a90a671c7d96df5c0418a98ba8796f043279ee66f52175add7b259c655b993130d6e19dfc3a69089d38d4ceda5f6b8d48ca901bec5c01fadde4939956b
- SSDEEP 196608:XsAbcD1WK6PVM9qsJ5on+nffCuYaagsjDPaByBXplncG:XnLHaByBXplF
- TLSH T1A3F6AF3652ECA42CD056B1BC1E9F7AF27123B1741224B15EBD9193362E22DE0473BB67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/TryUncle/TryUncle.app/Contents/MacOS/TryUncle\""1⤵PID:463
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/TryUncle/TryUncle.app/Contents/MacOS/TryUncle\""1⤵PID:463
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/TryUncle/TryUncle.app/Contents/MacOS/TryUncle1⤵PID:463
-
/bin/zsh/bin/zsh -c /Users/run/TryUncle/TryUncle.app/Contents/MacOS/TryUncle2⤵PID:464
-
-
/Users/run/TryUncle/TryUncle.app/Contents/MacOS/TryUncle/Users/run/TryUncle/TryUncle.app/Contents/MacOS/TryUncle2⤵PID:464
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:493
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:493
-
/usr/libexec/xpcproxyxpcproxy com.apple.StreamingUnzipService 1971⤵PID:494
-
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService1⤵PID:494