Overview

overview

10

Static

static

10

2026-09-24...sliver

macos-10.15-amd64

1

Analysis

  • max time kernel
    119s
  • max time network
    111s
  • platform
    macos-10.15_amd64
  • resource
    macos-20260915-en
  • resource tags

    arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    25/09/2026, 09:40

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-09-24_54da51854e1d8627ec994935396bb208_adload_dosia_glassworm_poet-rat_rekoobe_sliver
  • Size 65.3MB
  • Sample260925-lnbwtayvb1
  • SHA256 924df8bd3817a68139a91a65c32fdc5ecf28626b90e5e5f68804cd035504c8b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • /usr/libexec/xpcproxy
    xpcproxy com.apple.newsyslog
    1⤵
      PID:467
    • /usr/libexec/xpcproxy
      xpcproxy com.apple.csrutil.report
      1⤵
        PID:468
      • /usr/libexec/xpcproxy
        xpcproxy com.apple.emond.aslmanager
        1⤵
          PID:469
        • /usr/sbin/aslmanager
          /usr/sbin/aslmanager -s /var/log/eventmonitor
          1⤵
            PID:469
          • /usr/bin/csrutil
            /usr/bin/csrutil report
            1⤵
              PID:468
            • /bin/sh
              sh -c "sudo /bin/zsh -c \"/Users/run/2026-09-24_54da51854e1d8627ec994935396bb208_adload_dosia_glassworm_poet-rat_rekoobe_sliver\""
              1⤵
                PID:470
              • /bin/bash
                sh -c "sudo /bin/zsh -c \"/Users/run/2026-09-24_54da51854e1d8627ec994935396bb208_adload_dosia_glassworm_poet-rat_rekoobe_sliver\""
                1⤵
                  PID:470
                • /usr/bin/sudo
                  sudo /bin/zsh -c /Users/run/2026-09-24_54da51854e1d8627ec994935396bb208_adload_dosia_glassworm_poet-rat_rekoobe_sliver
                  1⤵
                    PID:470
                    • /bin/zsh
                      /bin/zsh -c /Users/run/2026-09-24_54da51854e1d8627ec994935396bb208_adload_dosia_glassworm_poet-rat_rekoobe_sliver
                      2⤵
                        PID:472
                      • /Users/run/2026-09-24_54da51854e1d8627ec994935396bb208_adload_dosia_glassworm_poet-rat_rekoobe_sliver
                        /Users/run/2026-09-24_54da51854e1d8627ec994935396bb208_adload_dosia_glassworm_poet-rat_rekoobe_sliver
                        2⤵
                          PID:472
                      • /usr/sbin/newsyslog
                        /usr/sbin/newsyslog
                        1⤵
                          PID:467

                        Network

                              MITRE ATT&CK Matrix

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads