Overview
overview
3Static
static
3Bluzyrino-x86_64.dmg
macos-10.15-amd64
1dmg-stage/....dylib
macos-10.15-amd64
1dmg-stage/....dylib
macos-10.15-amd64
1dmg-stage/....dylib
macos-10.15-amd64
1dmg-stage/....dylib
macos-10.15-amd64
1dmg-stage/....dylib
macos-10.15-amd64
1dmg-stage/....dylib
macos-10.15-amd64
1dmg-stage/...zyrino
macos-10.15-amd64
1Analysis
- max time kernel
149s - max time network
105s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
27/08/2026, 15:16
Static task
static1
Behavioral task
behavioral1
Sample
Bluzyrino-x86_64.dmg
Resource
macos-20250619-en
Behavioral task
behavioral2
Sample
dmg-stage/Bluzyrino.app/Contents/Frameworks/libaom.3.dylib
Resource
macos-20250619-en
Behavioral task
behavioral3
Sample
dmg-stage/Bluzyrino.app/Contents/Frameworks/libavif.16.dylib
Resource
macos-20250619-en
Behavioral task
behavioral4
Sample
dmg-stage/Bluzyrino.app/Contents/Frameworks/libcrypto.3.dylib
Resource
macos-20250619-en
Behavioral task
behavioral5
Sample
dmg-stage/Bluzyrino.app/Contents/Frameworks/libdav1d.7.dylib
Resource
macos-20250619-en
Behavioral task
behavioral6
Sample
dmg-stage/Bluzyrino.app/Contents/Frameworks/libssl.3.dylib
Resource
macos-20250619-en
Behavioral task
behavioral7
Sample
dmg-stage/Bluzyrino.app/Contents/Frameworks/libvmaf.3.dylib
Resource
macos-20250619-en
Behavioral task
behavioral8
Sample
dmg-stage/Bluzyrino.app/Contents/MacOS/Bluzyrino
Resource
macos-20250619-en
General
- Target dmg-stage/Bluzyrino.app/Contents/Frameworks/libaom.3.dylib
- Size 4.3MB
- Sample260827-snk8taaa96
- SHA256 b9057a61c37825555edaabe48149b5afda48a31641d0ee30878bc58d4750c75f
- MD5 5409eba13f55da225527ffeb8729a296
- SHA1 667522c4e2c098aff88c6f1a431c03328063291b
- SHA512 2f01b1de2610adde776d38492ffa3ce9ef455dd651550b44c45509dbcc4d24005251a3b26ad326ca125cbe2e0ecdf397c64f53b3d4710fe73c2bf1df3a1c2b9f
- SSDEEP 98304:Fx/uVgiwxSuJJGdv7drLYkBUEX7ucw+J1RFgfszTyAD/uPgtAhwzRxvDp8A:6VgiwxSsJGdvNLYkB3X7uczt0ge6RXF
- TLSH T133267EEAC3715278D80B8C745B7F5A82581C30BF9526837D3AED19722B36DD16B09F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/dmg-stage/Bluzyrino.app/Contents/Frameworks/libaom.3.dylib\""1⤵PID:507
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/dmg-stage/Bluzyrino.app/Contents/Frameworks/libaom.3.dylib\""1⤵PID:507
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/dmg-stage/Bluzyrino.app/Contents/Frameworks/libaom.3.dylib1⤵PID:507
-
/bin/zsh/bin/zsh -c /Users/run/dmg-stage/Bluzyrino.app/Contents/Frameworks/libaom.3.dylib2⤵PID:508
-
-
/Users/run/dmg-stage/Bluzyrino.app/Contents/Frameworks/libaom.3.dylib/Users/run/dmg-stage/Bluzyrino.app/Contents/Frameworks/libaom.3.dylib2⤵PID:508
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:536
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:536