Analysis
- max time kernel
90s - max time network
104s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
30/09/2026, 22:27
Static task
static1
Behavioral task
behavioral1
Sample
Global VPN - Full Tunnel v4/ta.key
Resource
macos-20260915-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Global VPN - Split Tunnel v4/ta.key
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target Global VPN - Split Tunnel v4/ta.key
- Size 657B
- Sample260930-2ddknayv3p
- SHA256 c6ae569b946e49b56225b3570dd7db582fa11d8c8e27d891e6d7d3433cf17c04
- MD5 aa0aad8a42129103d08d2bcf3ee82368
- SHA1 d5de9134677705bc650768b25e73412354aa0593
- SHA512 27a5a86f132d44c21063907e11996917aad38dae25539c7c95fc218feb3fd1b478cc01c41bbd8d81f6e9e07d1f4284af062964aa5730747f4207fce1a2488a04
- TLSH T16701FE079FD5CE07887CE71BE5260517CE1A056B22C85E07607281403C66585EB8EC34
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Global VPN - Split Tunnel v4/ta.key\""1⤵PID:464
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Global VPN - Split Tunnel v4/ta.key\""1⤵PID:464
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Global VPN - Split Tunnel v4/ta.key"1⤵PID:464
-
/bin/zsh/bin/zsh -c "/Users/run/Global VPN - Split Tunnel v4/ta.key"2⤵PID:465
-
-
/Users/run/Global/Users/run/Global VPN - Split Tunnel v4/ta.key2⤵PID:465
-