Overview
overview
1Static
static
1Medius Spe...ed.app
macos-10.15-amd64
1Medius Spe...ed.app
macos-10.15-amd64
1Medius Spe...ed.app
macos-10.15-amd64
1Medius Spe...ed.app
macos-10.15-amd64
1Medius Spe...ed.app
macos-10.15-amd64
1Medius Spe...ed.app
macos-10.15-amd64
1Medius Spe...ed.app
macos-10.15-amd64
1Medius Spe...ed.app
macos-10.15-amd64
1Medius Spe...ed.app
macos-10.15-amd64
1Medius Spe...ed.app
macos-10.15-amd64
1Medius Spe...ed.app
macos-10.15-amd64
1Medius Spe...ed.app
macos-10.15-amd64
1Medius Spe...ed.app
macos-10.15-amd64
1Medius Spe...ed.app
macos-10.15-amd64
1Analysis
- max time kernel
101s - max time network
147s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
31/08/2026, 18:25
Static task
static1
Behavioral task
behavioral1
Sample
Medius Spend Management Suite_2026.8.27.0_Cloud_Signed.app
Resource
macos-20250619-en
Behavioral task
behavioral2
Sample
Medius Spend Management Suite_2026.8.27.0_Runtime_15_Signed.app
Resource
macos-20250619-en
Behavioral task
behavioral3
Sample
Medius Spend Management Suite_2026.8.27.0_Runtime_17_Signed.app
Resource
macos-20250619-en
Behavioral task
behavioral4
Sample
Medius Spend Management Suite_2026.8.27.0_Runtime_18_Signed.app
Resource
macos-20250619-en
Behavioral task
behavioral5
Sample
Medius Spend Management Suite_2026.8.27.0_Runtime_19_Signed.app
Resource
macos-20250619-en
Behavioral task
behavioral6
Sample
Medius Spend Management Suite_2026.8.27.0_Runtime_20_Signed.app
Resource
macos-20250619-en
Behavioral task
behavioral7
Sample
Medius Spend Management Suite_2026.8.27.0_Runtime_21_Signed.app
Resource
macos-20250619-en
Behavioral task
behavioral8
Sample
Medius Spend Management Suite_2026.8.27.0_Runtime_22_Signed.app
Resource
macos-20250619-en
Behavioral task
behavioral9
Sample
Medius Spend Management Suite_2026.8.27.0_Runtime_23_Signed.app
Resource
macos-20250619-en
Behavioral task
behavioral10
Sample
Medius Spend Management Suite_2026.8.27.0_Runtime_24_Signed.app
Resource
macos-20250619-en
Behavioral task
behavioral11
Sample
Medius Spend Management Suite_2026.8.27.0_Runtime_25_Signed.app
Resource
macos-20250619-en
Behavioral task
behavioral12
Sample
Medius Spend Management Suite_2026.8.27.0_Runtime_26_Signed.app
Resource
macos-20250619-en
Behavioral task
behavioral13
Sample
Medius Spend Management Suite_2026.8.27.0_Runtime_27_Signed.app
Resource
macos-20250619-en
Behavioral task
behavioral14
Sample
Medius Spend Management Suite_2026.8.27.0_Runtime_28_Signed.app
Resource
macos-20250619-en
General
- Target Medius Spend Management Suite_2026.8.27.0_Cloud_Signed.app
- Size 544KB
- Sample260831-w2zvxaaa75
- SHA256 94cc81e5e90127aa21d77a494f3257eff0eb9a6c841738f95d09c9b9f8654207
- MD5 35e46ed38a68088891aedab59caf6e7f
- SHA1 c6a6b6e72e1cd7b90485b372c0d24af180bf02d8
- SHA512 37b4ba2549423e167e7a0c567b3ad32f4fa7be669a1dde8e22bb402ec1a51358a3b8f89a11a3bda87c17738f2f7f4e127fb2617287891dafefb4e4a491142223
- SSDEEP 12288:HplmaW70pFhX0qKsL0CbP+vXqR5//Y16vAXS:Q74z0MICbPA66XS
- TLSH T14EC41272CD752603F8837B30704C5925BA31BAE0D951B27BAECDD61AE3D65921BCA01F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"open /Users/run/Medius\\ Spend\\ Management\\ Suite_2026.8.27.0_Cloud_Signed.app\""1⤵PID:499
-
/bin/bashsh -c "sudo /bin/zsh -c \"open /Users/run/Medius\\ Spend\\ Management\\ Suite_2026.8.27.0_Cloud_Signed.app\""1⤵PID:499
-
/usr/bin/sudosudo /bin/zsh -c "open /Users/run/Medius\\ Spend\\ Management\\ Suite_2026.8.27.0_Cloud_Signed.app"1⤵PID:499
-
/bin/zsh/bin/zsh -c "open /Users/run/Medius\\ Spend\\ Management\\ Suite_2026.8.27.0_Cloud_Signed.app"2⤵PID:500
-
-
/usr/bin/openopen "/Users/run/Medius Spend Management Suite_2026.8.27.0_Cloud_Signed.app"2⤵PID:500
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:502
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:502
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:513
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:513
-
/usr/libexec/xpcproxyxpcproxy com.apple.StreamingUnzipService 1721⤵PID:514
-
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService1⤵PID:514
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:520
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:520
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:524
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:525