Analysis
- max time kernel
121s - max time network
128s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
31/08/2026, 08:22
Static task
static1
Behavioral task
behavioral1
Sample
suits.dmg
Resource
macos-20250619-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Suits/Suits.app/Contents/MacOS/Suits
Resource
macos-20250619-en
0 signatures
150 seconds
General
- Target Suits/Suits.app/Contents/MacOS/Suits
- Size 51KB
- Sample260831-j9rhaazycw
- SHA256 4a92d8f93f4bd796618ed6a3957b63607b127b9a0a4d0cf0bc02b59e90cf894e
- MD5 a392fe7d724a9f08132084e1549a34e5
- SHA1 2de2e1f57e9754dcfe245c2599010cdbcdf66d0e
- SHA512 49e874a0bc932dfe139953e5993acde5197c464fa5c667e1149bb522b48fc0e8eeb66f234164ddca933c1671a1a3409baa492e618a470a36a51485011779fe16
- SSDEEP 768:GQIRWjgW7jaxlA46sld1B40Ql8hNTIkab8Z:6QlkZIkKO
- TLSH T10F33746273E4280BF7A2973941F72383CEF9FD9A9932C18E858161D91DA17F82E10757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Suits/Suits.app/Contents/MacOS/Suits\""1⤵PID:463
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Suits/Suits.app/Contents/MacOS/Suits\""1⤵PID:463
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Suits/Suits.app/Contents/MacOS/Suits1⤵PID:463
-
/bin/zsh/bin/zsh -c /Users/run/Suits/Suits.app/Contents/MacOS/Suits2⤵PID:465
-
-
/Users/run/Suits/Suits.app/Contents/MacOS/Suits/Users/run/Suits/Suits.app/Contents/MacOS/Suits2⤵PID:465
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:494
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:494
-
/usr/libexec/xpcproxyxpcproxy com.apple.StreamingUnzipService 1971⤵PID:496
-
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService1⤵PID:496