Analysis
- max time kernel
78s - max time network
125s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
30/09/2026, 02:21
Static task
static1
Behavioral task
behavioral1
Sample
Global VPN - Full Tunnel v4/ta.key
Resource
macos-20260915-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Global VPN - Split Tunnel v4/ta.key
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target Global VPN - Full Tunnel v4/ta.key
- Size 657B
- Sample260930-cta22azdnb
- SHA256 11542046ff465e3b1b22e169ae584e138b64f89f0be5ea31992e99c7cacb7368
- MD5 200e5cf2c8a8f4ac4a02b7135ddea813
- SHA1 f47e921c116a2aa305f81bf0034f8d9965852d5d
- SHA512 91e0aaedff2e67cea1f4283aaaf62ecf19cc89768e56f72d11aa2974f9d6ffb0be8a2e7832066d92082a21fb030d5651c2fd74c6c89ec4234c7974fd6ed2a1e6
- TLSH T14F012367FEA8E491CD4DD4D37FD24636C73B5A01258D642340EA32032AB1B917B4CD64
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Global VPN - Full Tunnel v4/ta.key\""1⤵PID:463
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Global VPN - Full Tunnel v4/ta.key\""1⤵PID:463
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Global VPN - Full Tunnel v4/ta.key"1⤵PID:463
-
/bin/zsh/bin/zsh -c "/Users/run/Global VPN - Full Tunnel v4/ta.key"2⤵PID:464
-
-
/Users/run/Global/Users/run/Global VPN - Full Tunnel v4/ta.key2⤵PID:464
-