Analysis
- max time kernel
78s - max time network
240s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
28/09/2026, 14:19
Static task
static1
Behavioral task
behavioral1
Sample
1024
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
1024
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
1024
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral4
Sample
1024
Resource
android-x64-20260721-en
Behavioral task
behavioral5
Sample
1024
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
1024
Resource
macos-20260915-en
Behavioral task
behavioral7
Sample
1024
Resource
ubuntu2204-amd64-20260513-en
Behavioral task
behavioral8
Sample
1024
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral9
Sample
1024
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral10
Sample
1024
Resource
debian9-mipsel-20260513-en
General
- Target 1024
- Size 1KB
- Sample260928-rnbtpsbb76
- SHA256 44ede938c644c24e6bc4a9519c7d68e213dbaab15d040f4c11be5df30334cab1
- MD5 92318d2920745842a989276ffd74b34a
- SHA1 baf78f8250c61502d1f49d090d6e8038f14ae369
- SHA512 152dc9cfb7324897a77abe9466f1c08c68f75f5ba5e177a8088b0aa081b20cf912eef21c8ff74fea70776e967cbdfb6c8e4de02b52270e1254d2ccba45dbef1e
- TLSH T1B521A8BF7F1119497463D1209C4A073AD1BA5F95CF88A96939443D968F49937045490D
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/1024\""1⤵PID:466
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/1024\""1⤵PID:466
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/10241⤵PID:466
-
/bin/zsh/bin/zsh -c /Users/run/10242⤵PID:467
-
-
/Users/run/1024/Users/run/10242⤵PID:467
-
-
/bin/shsh /Users/run/10242⤵PID:467
-
-
/bin/bashsh /Users/run/10242⤵PID:467
-
MIIDlDCCAxqgAwIBAgIQIFDtQriFIqiwQcJoLXEoCzAKBggqhkjOPQQDAzB/MQswCMIIDlDCCAxqgAwIBAgIQIFDtQriFIqiwQcJoLXEoCzAKBggqhkjOPQQDAzB/MQswC3⤵PID:469
-
-
Iy/U5BcNEbJvfMNINEhhy0UIOBuB+7b27mGowAoqPWq3XoAvl0wk0io5jMHX7vHSIy/U5BcNEbJvfMNINEhhy0UIOBuB+7b27mGowAoqPWq3XoAvl0wk0io5jMHX7vHS3⤵PID:477
-
-
K4pce0NWDKg9aD+tLw2o4IBXzCCAVswEgYDVR0TAQH/BAgwBgEB/wIBATAfBgNVHK4pce0NWDKg9aD+tLw2o4IBXzCCAVswEgYDVR0TAQH/BAgwBgEB/wIBATAfBgNVH3⤵PID:478
-
-
0MtMzg0LVIxLmNlcjA/BgNVHSAEODA2MDQGBFUdIAAwLDAqBggrBgEFBQcCARYea0MtMzg0LVIxLmNlcjA/BgNVHSAEODA2MDQGBFUdIAAwLDAqBggrBgEFBQcCARYea3⤵PID:481
-
-
sjkFhKjDK9GngZHTFc0vEVWMA4GA1UdDwEB/wQEAwIBhjAKBggqhkjOPQQDAwNoAsjkFhKjDK9GngZHTFc0vEVWMA4GA1UdDwEB/wQEAwIBhjAKBggqhkjOPQQDAwNoA3⤵PID:485
-
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:519
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:519