Overview
overview
4Static
static
1SideloadlySetup.dmg
macos-10.15-amd64
4Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1__future__.pyc
macos-10.15-amd64
1__phello__.foo.pyc
macos-10.15-amd64
1_bootlocale.pyc
macos-10.15-amd64
1_collections_abc.pyc
macos-10.15-amd64
1_compat_pickle.pyc
macos-10.15-amd64
1_compression.pyc
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly...loadly
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly....dylib
macos-10.15-amd64
1Sideloadly...1_udid
macos-10.15-amd64
4Sideloadly...daemon
macos-10.15-amd64
4Analysis
- max time kernel
69s - max time network
105s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
16/09/2026, 14:37
Static task
static1
Behavioral task
behavioral1
Sample
SideloadlySetup.dmg
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral2
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/Frameworks/libcrypto.1.1.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral3
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/Frameworks/libncursesw.5.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral4
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/Frameworks/libpanelw.5.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral5
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/Frameworks/libssl.1.1.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral6
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/Frameworks/libtcl8.6.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral7
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/Frameworks/libtk8.6.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral8
Sample
__future__.pyc
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral9
Sample
__phello__.foo.pyc
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral10
Sample
_bootlocale.pyc
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral11
Sample
_collections_abc.pyc
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral12
Sample
_compat_pickle.pyc
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral13
Sample
_compression.pyc
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral14
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/Frameworks/sideloadly.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral15
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/MacOS/Sideloadly
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral16
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/iconengines/libqsvgicon.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral17
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/imageformats/libqgif.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral18
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/imageformats/libqicns.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral19
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/imageformats/libqico.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral20
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/imageformats/libqjpeg.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral21
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/imageformats/libqmacheif.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral22
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/imageformats/libqmacjp2.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral23
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/imageformats/libqsvg.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral24
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/imageformats/libqtga.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral25
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/imageformats/libqtiff.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral26
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/imageformats/libqwbmp.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral27
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/imageformats/libqwebp.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral28
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/platforms/libqcocoa.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral29
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/printsupport/libcocoaprintersupport.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral30
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/PlugIns/styles/libqmacstyle.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral31
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/Resources/get_m1_udid
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral32
Sample
Sideloadly! v0.60 Setup/Sideloadly.app/Contents/Resources/sideloadly-daemon
Resource
macos-20260915-en
macos-10.15-amd64
General
- Target _compat_pickle.pyc
- Size 5KB
- Sample260916-ry481acm5w
- SHA256 917768ceb4a36873eb76b21b42b9150f3ac7e4b0e8c18a68591262b8ee969571
- MD5 646aee6e076d355db101c6e3ee3d4483
- SHA1 b9233dcd5cff1a1bb0317de413ab3dbd78c67f34
- SHA512 81de8e7fef99c536c2ee0eb201c2c1329938303d4a4fa67615a3be9692ed59cd08a3f8a2b7165d24e1045a9c4473e97b21824a2a8993ddf780c1422c41c87149
- SSDEEP 96:/bD8JHvjrkava8xqTdTTGmIT7ve6CgPfUzCZjhxCjfHhQBTuO:zIJnkZAqmGwPsmoHXO
- TLSH T16EB10700731C20D3FED5BBF3A775670296AD00812781D1968F28E6530EAD742EE2A77E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/_compat_pickle.pyc\""1⤵PID:474
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/_compat_pickle.pyc\""1⤵PID:474
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/_compat_pickle.pyc1⤵PID:474
-
/bin/zsh/bin/zsh -c /Users/run/_compat_pickle.pyc2⤵PID:476
-
-
/Users/run/_compat_pickle.pyc/Users/run/_compat_pickle.pyc2⤵PID:476
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:492
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:492
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /var/db/nsurlstoraged/dafsaData.bin
- Size 56KB
- SHA256 ceec06f21c7350cc12d5e56e79bff07ed9bdcbf3f22344a0a30703df6f9f1678
- MD5 18342898ca9289afee7db51a6d8447e7
- SHA1 48b408dd1904ca0e175129a8b0e8415055910530
- SHA512 0a6dfd243e7df49c94f2a7d297f48506090b4b6cfab60a92692d5f5e1c69fbb4ecc523f250a2ab51e3b3d778d766c5986a026793f213280027372190e8cf4f96
- SSDEEP 768:jIs6HFz/tldmC2rIxjfNCwi805lzrcb+/+Ppgv2M2V1+KWtHXtd0Hfh5BJJbEf+B:jPA1rg8jkwirzc+G2+/PfjJd0o
- TLSH T10243E1C57395D3893E5372A932026376E15DA1110FBB819CA70F591DCDBEE2F02C925E
- MD5 SHA1 SHA512 SSDEEP TLSH