Analysis
- max time kernel
99s - max time network
149s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
28/09/2026, 12:31
Static task
static1
Behavioral task
behavioral1
Sample
darwin_arm64
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target darwin_arm64
- Size 33KB
- Sample260928-pp7xesvxbt
- SHA256 e5aa0e4b809784c289fc1cf6d1f435900f6c7945ba793c1a18e7a12cff99db14
- MD5 d191c51b3a6841e32a3589cbd743e49b
- SHA1 abd5160dcd4e0a62eba0c5ecf3a87949650a24c0
- SHA512 22c58578c12b4f35fbc39bfb2ac784a619a211b160cdc800423288fb3babe6fce8764bee839839ea907cc6fdd95fa80b897fa80075499cde34fd3eb1f3e9dc58
- SSDEEP 48:MGLMqlGI9IKU2yqm3DaORJncf4gmJBkeDxPMRtPlxkllLRgowjWaXLRgoz0MLAau:MGL7IKo4Gxcf/mJfklilltg1jJtgSNu
- TLSH T127F25F139B1C0A61C15D633C92BB1B026276F5D086C56B674B10C72CAFCA3C5BDB5D87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/darwin_arm64\""1⤵PID:470
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/darwin_arm64\""1⤵PID:470
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/darwin_arm641⤵PID:470
-
/bin/zsh/bin/zsh -c /Users/run/darwin_arm642⤵PID:471
-
-
/Users/run/darwin_arm64/Users/run/darwin_arm642⤵PID:471
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.systemsoundserverd1⤵PID:498
-
/usr/sbin/systemsoundserverd/usr/sbin/systemsoundserverd1⤵PID:498
-
/usr/libexec/xpcproxyxpcproxy com.apple.pbs1⤵PID:499
-
/System/Library/CoreServices/pbs/System/Library/CoreServices/pbs1⤵PID:499
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:500
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:500