Analysis
- user interaction
yes - max time kernel
26s - max time network
29s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
09/09/2026, 20:31
Static task
static1
Behavioral task
behavioral1
Sample
NotchNook.app.zip
Resource
macos-20250619-en
0 signatures
150 seconds
General
- Target NotchNook.app.zip
- Size 41.4MB
- Sample260909-zar8jaap21
- SHA256 fe4e82946e9385d371a328eb9981713e6da67b9c3cf44a3068212ba378f0bdff
- MD5 f16c785d1bab82fd0f32cb9bad6fa14f
- SHA1 b66c0fd2e319dbd4062661b9c9997495a8093d13
- SHA512 0b9ede6489e750609004e56843f512aaf44cd427868a8614a536f849d80b07c9d7651c844a342f5255ce3024d5c0e9d2b7542916b10873f2c2b7bec3d7bcca23
- SSDEEP 786432:ISCRKH861lmVON4QtjqSm+G91DXNn8ODsfKn4ImAN1b1iIbQw:vCRKH8wlmVjqWh8osfMCAL1Z
- TLSH T1B697333ACBFD14F8CB2252F3680765434060AB9E953891A9DB13219D33F6AB4C375D9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/NotchNook.app.zip\""1⤵PID:472
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/NotchNook.app.zip\""1⤵PID:472
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/NotchNook.app.zip1⤵PID:472
-
/bin/zsh/bin/zsh -c /Users/run/NotchNook.app.zip2⤵PID:473
-
-
/Users/run/NotchNook.app.zip/Users/run/NotchNook.app.zip2⤵PID:473
-
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:512
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:513
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:514
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:514