Overview
overview
6Static
static
6base.apk
windows10-2004-x64
3base.apk
windows10-ltsc_2021-x64
3base.apk
windows11-21h2-x64
3base.apk
windows11-ltsc_2024-x64
3base.apk
android-10-x64
1base.apk
android-11-x64
1base.apk
android-13-x64
1base.apk
android-14-x64
1base.apk
android-15-x64
1base.apk
android-9-x86
1base.apk
macos-10.15-amd64
1base.apk
debian-9-armhf
Analysis
- max time kernel
102s - max time network
102s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
27/08/2026, 18:15
Static task
static1
Behavioral task
behavioral1
Sample
base.apk
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
base.apk
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral3
Sample
base.apk
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
base.apk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
base.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral6
Sample
base.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral7
Sample
base.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral8
Sample
base.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral9
Sample
base.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral10
Sample
base.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral11
Sample
base.apk
Resource
macos-20250619-en
Behavioral task
behavioral12
Sample
base.apk
Resource
debian9-armhf-20260513-en
General
- Target base.apk
- Size 7.7MB
- Sample260827-wv3yzsysfx
- SHA256 680b4f8eadeeac6c7e548fde0687db501dedc51d578f34ee24a9f34217250d40
- MD5 ff463336d8c0faa16132c88ba05b6fbc
- SHA1 3b2b22215818f15a20c6d431b59adc3e0df9221f
- SHA512 57579b0b3c77a07bbdcdd1764cc3b3914b5b0628304db8e4fef74b0f76c6e2cb739c2632bfb48efe433e0bc2315524fdf12355c02b41f904e6cd930885815b71
- SSDEEP 196608:hiTGQ8AsdtOs1vjJCpXm5NaTgU9onWk2muTl:u8DtJvj0cNzU9XB
- TLSH T112860285BB48D92BC477703645BB9325458B4D068E839753A9443E0CACBBAC81F9EFCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/base.apk\""1⤵PID:472
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/base.apk\""1⤵PID:472
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/base.apk1⤵PID:472
-
/bin/zsh/bin/zsh -c /Users/run/base.apk2⤵PID:473
-
-
/Users/run/base.apk/Users/run/base.apk2⤵PID:473
-
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:508
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:509
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:510
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:510
-
/usr/libexec/xpcproxyxpcproxy com.apple.StreamingUnzipService 1861⤵PID:511
-
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService1⤵PID:511
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:514
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:514