Overview
overview
4Static
static
1Egg.dmg
macos-10.15-amd64
1Egg/Egg.ap...OS/Egg
macos-10.15-amd64
1Egg/Egg.ap...Up.svg
windows10-2004-x64
3Egg/Egg.ap...Up.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...le.svg
windows10-2004-x64
3Egg/Egg.ap...le.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...ht.svg
windows10-2004-x64
3Egg/Egg.ap...ht.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...lt.svg
windows10-2004-x64
3Egg/Egg.ap...lt.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...er.svg
windows10-2004-x64
3Egg/Egg.ap...er.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...le.svg
windows10-2004-x64
3Egg/Egg.ap...le.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...st.svg
windows10-2004-x64
3Egg/Egg.ap...st.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...wn.svg
windows10-2004-x64
3Egg/Egg.ap...wn.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...ft.svg
windows10-2004-x64
3Egg/Egg.ap...ft.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...ht.svg
windows10-2004-x64
3Egg/Egg.ap...ht.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...rd.svg
windows10-2004-x64
3Egg/Egg.ap...rd.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...ck.svg
windows10-2004-x64
3Egg/Egg.ap...ck.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...se.svg
windows10-2004-x64
3Egg/Egg.ap...se.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...le.svg
windows10-2004-x64
3Egg/Egg.ap...le.svg
windows11-ltsc_2024-x64
4Egg/Egg.ap...ad.svg
windows10-2004-x64
3Egg/Egg.ap...ad.svg
windows11-ltsc_2024-x64
4Analysis
- max time kernel
77s - max time network
138s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
02/10/2026, 12:25
Static task
static1
Behavioral task
behavioral1
Sample
Egg.dmg
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral2
Sample
Egg/Egg.app/Contents/MacOS/Egg
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral3
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/ArrowUp.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/ArrowUp.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/ArrowUpCircle.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/ArrowUpCircle.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/ArrowUpRight.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/ArrowUpRight.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/Bolt.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/Bolt.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/Browser.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/Browser.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/CheckCircle.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/CheckCircle.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/Checklist.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/Checklist.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/ChevronDown.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/ChevronDown.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/ChevronLeft.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/ChevronLeft.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/ChevronRight.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/ChevronRight.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/Clipboard.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/Clipboard.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/Clock.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/Clock.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/Close.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/Close.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/CloseCircle.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/CloseCircle.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
Egg/Egg.app/Contents/Resources/EggIcons_EggIcons.bundle/Contents/Resources/Icons/CloudUpload.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
General
- Target Egg/Egg.app/Contents/MacOS/Egg
- Size 5.6MB
- Sample261002-plq5hatx2p
- SHA256 743ddd2b7cc6f5e017b570b0c2fc22eb722ab6634a6cc06f06c38337a9691e47
- MD5 257bf99406709892bc8ffa5e34d7e53e
- SHA1 8bf1f0c39c886fa52769129c48e02afc36658c77
- SHA512 dc3f28a0ebad7744f9ae9c8283935cc3c8db262f920acc4eee641fddb6e6dd87eaab88cfb1665892362e8f1cedc98725764ee0516cf558cb5f96aa1933d621ef
- SSDEEP 49152:zsx//lZ/IFPjZe2gOvoux5kYQzvMqNL4crENvFlXOOphFdye73j0Q7drXFeK6CzI:q/9NK8svoux5kYQTUcwVpn57dvx+f
- TLSH T144467C5157DC2834D4DA73FC6D4996A0742BB2944270C2ECBE7A506EED42FE2C23EA71
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Egg/Egg.app/Contents/MacOS/Egg\""1⤵PID:469
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Egg/Egg.app/Contents/MacOS/Egg\""1⤵PID:469
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Egg/Egg.app/Contents/MacOS/Egg1⤵PID:469
-
/bin/zsh/bin/zsh -c /Users/run/Egg/Egg.app/Contents/MacOS/Egg2⤵PID:470
-
-
/Users/run/Egg/Egg.app/Contents/MacOS/Egg/Users/run/Egg/Egg.app/Contents/MacOS/Egg2⤵PID:470
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:501
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:501
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /var/db/nsurlstoraged/dafsaData.bin
- Size 56KB
- SHA256 ceec06f21c7350cc12d5e56e79bff07ed9bdcbf3f22344a0a30703df6f9f1678
- MD5 18342898ca9289afee7db51a6d8447e7
- SHA1 48b408dd1904ca0e175129a8b0e8415055910530
- SHA512 0a6dfd243e7df49c94f2a7d297f48506090b4b6cfab60a92692d5f5e1c69fbb4ecc523f250a2ab51e3b3d778d766c5986a026793f213280027372190e8cf4f96
- SSDEEP 768:jIs6HFz/tldmC2rIxjfNCwi805lzrcb+/+Ppgv2M2V1+KWtHXtd0Hfh5BJJbEf+B:jPA1rg8jkwirzc+G2+/PfjJd0o
- TLSH T10243E1C57395D3893E5372A932026376E15DA1110FBB819CA70F591DCDBEE2F02C925E
- MD5 SHA1 SHA512 SSDEEP TLSH