ceec06f21c7350cc12d5e56e79bff07ed9bdcbf3f22344a0a30703df6f9f1678 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

dafsaData.bin

windows11-ltsc_2024-x64

3

dafsaData.bin

macos-10.15-amd64

1

dafsaData.bin

ubuntu-22.04-amd64

dafsaData.bin

debian-9-armhf

dafsaData.bin

debian-9-mips

dafsaData.bin

debian-9-mipsel

Analysis

user interaction
yes
max time kernel
145s
max time network
144s
platform
macos-10.15_amd64
resource
macos-20260915-en
resource tags

arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
22/09/2026, 09:41

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

dafsaData.bin

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

adware discovery execution spyware

Behavioral task

behavioral2

Sample

dafsaData.bin

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

dafsaData.bin

Resource

ubuntu2204-amd64-20260513-en

ubuntu-22.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

dafsaData.bin

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

dafsaData.bin

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

dafsaData.bin

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Report Analysis Logs

General

Target
dafsaData.bin
Size 56KB
Sample260922-ln3pjadb37
SHA256 ceec06f21c7350cc12d5e56e79bff07ed9bdcbf3f22344a0a30703df6f9f1678
MD5 18342898ca9289afee7db51a6d8447e7
SHA1 48b408dd1904ca0e175129a8b0e8415055910530
SHA512 0a6dfd243e7df49c94f2a7d297f48506090b4b6cfab60a92692d5f5e1c69fbb4ecc523f250a2ab51e3b3d778d766c5986a026793f213280027372190e8cf4f96
SSDEEP 768:jIs6HFz/tldmC2rIxjfNCwi805lzrcb+/+Ppgv2M2V1+KWtHXtd0Hfh5BJJbEf+B:jPA1rg8jkwirzc+G2+/PfjJd0o
TLSH
T10243E1C57395D3893E5372A932026376E15DA1110FBB819CA70F591DCDBEE2F02C925E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/dafsaData.bin\""
1⤵
PID:470

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/dafsaData.bin\""
1⤵
PID:470

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/dafsaData.bin
1⤵
PID:470
- /bin/zsh
  /bin/zsh -c /Users/run/dafsaData.bin
  2⤵
  PID:473
- /Users/run/dafsaData.bin
  /Users/run/dafsaData.bin
  2⤵
  PID:473

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:498

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:498

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:499

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:499

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:500

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:500

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:519

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:519

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:520

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:520

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump_agent
1⤵
PID:521

/usr/libexec/spindump_agent
/usr/libexec/spindump_agent
1⤵
PID:521

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.satellite.0CB568A7-3A40-473C-B744-A5565C3E7C7F 518
1⤵
PID:525

/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
1⤵
PID:525

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportMemoryException
1⤵
PID:528

/usr/libexec/ReportMemoryException
/usr/libexec/ReportMemoryException
1⤵
PID:528

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:529

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:529

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy