Analysis
- max time kernel
80s - max time network
104s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
31/08/2026, 07:20
Static task
static1
Behavioral task
behavioral1
Sample
santadrop.dmg
Resource
macos-20250619-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Santa Drop/Santa Drop.app/Contents/MacOS/Santa Drop
Resource
macos-20250619-en
0 signatures
150 seconds
General
- Target Santa Drop/Santa Drop.app/Contents/MacOS/Santa Drop
- Size 51KB
- Sample260831-h58ekaxbmf
- SHA256 97b8bd367eb1c2c151be11e79e9f633947bcf7e6a0bfe88ff1ee3bc1bba7f872
- MD5 805b27d72a2e3569b2203bb7c2fe628d
- SHA1 ed9cdd7a07923df4933ace6e02c1018883572d2e
- SHA512 8333dcfa87f29a18ab19c1cfbb4a01848a6e7d75e125f85801ed8428bd63e25a6acb347566657f73b71fac52be720ca14d8e718892be677fab6c2bfc59cea7bb
- SSDEEP 768:GQIRWjgW7jaxlA46sld1B40AEr2v8htkab8O:6F+ktkK
- TLSH T10E33746163E4280BF7A2973D41F72383CEF9FD9A9932C18E458161D91DA17F82E10757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Santa Drop/Santa Drop.app/Contents/MacOS/Santa Drop\""1⤵PID:458
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Santa Drop/Santa Drop.app/Contents/MacOS/Santa Drop\""1⤵PID:458
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Santa Drop/Santa Drop.app/Contents/MacOS/Santa Drop"1⤵PID:458
-
/bin/zsh/bin/zsh -c "/Users/run/Santa Drop/Santa Drop.app/Contents/MacOS/Santa Drop"2⤵PID:459
-
-
/Users/run/Santa/Users/run/Santa Drop/Santa Drop.app/Contents/MacOS/Santa Drop2⤵PID:459
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:487
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:487
-
/usr/libexec/xpcproxyxpcproxy com.apple.StreamingUnzipService 1981⤵PID:488
-
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService1⤵PID:488