Resubmissions
02/10/2026, 18:32
261002-w6wdaaxv3k102/10/2026, 18:31
261002-w6caeaverh102/10/2026, 18:05
261002-wpf72awzh1102/10/2026, 18:05
261002-wn5h8swt6m102/10/2026, 18:04
261002-wnvzssfe39102/10/2026, 17:48
261002-wdw44stalg302/10/2026, 17:48
261002-wdgdnashqf102/10/2026, 17:43
261002-wavf4ssfra6Analysis
- max time kernel
872s - max time network
874s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
02/10/2026, 18:05
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260929_075312.jpg
Resource
android-34-x64-arm64-20260325.1-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
IMG_20260929_075312.jpg
Resource
macos-20260915-en
0 signatures
900 seconds
General
- Target IMG_20260929_075312.jpg
- Size 176KB
- Sample261002-wpf72awzh1
- SHA256 f51057e1b4701019e9da585f736a368a5d3d7db60a5e988c14a2e8c1f4844aa1
- MD5 0df37b9a57bd1314922c2363ee80dbc4
- SHA1 52723cef61fc6f701e4365c7e6781f8f56907c5f
- SHA512 0924f638129da45b801e4554d877c3dc7621d37bdad1a0cd2030f3cb7a1e3c759494b4053c0d5cbc777d976dcd2e6783880460b34a82987a2a4d2a48f30bdf88
- SSDEEP 3072:8bZgW+9SNDab5Rl1yH9yXH5p71VeF2QfUJfmxkXB3sbabOQrMs5aQUuSrQ3:mhYki5Rlkd07DeHMgkXB8mqXs5tzYk
- TLSH T12A0412265C6BB6E4B50DC3BD2C290F668BDBE3D59ED7315029E180005A737FE6868CE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/usr/libexec/xpcproxyxpcproxy com.apple.systemstats.daily1⤵PID:466
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/IMG_20260929_075312.jpg\""1⤵PID:467
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/IMG_20260929_075312.jpg\""1⤵PID:467
-
/usr/libexec/xpcproxyxpcproxy com.apple.newsyslog1⤵PID:468
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/IMG_20260929_075312.jpg1⤵PID:467
-
/bin/zsh/bin/zsh -c /Users/run/IMG_20260929_075312.jpg2⤵PID:472
-
-
/Users/run/IMG_20260929_075312.jpg/Users/run/IMG_20260929_075312.jpg2⤵PID:472
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.csrutil.report1⤵PID:470
-
/usr/libexec/xpcproxyxpcproxy com.apple.emond.aslmanager1⤵PID:471
-
/usr/bin/csrutil/usr/bin/csrutil report1⤵PID:470
-
/usr/sbin/aslmanager/usr/sbin/aslmanager -s /var/log/eventmonitor1⤵PID:471
-
/usr/sbin/newsyslog/usr/sbin/newsyslog1⤵PID:468
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.systemsoundserverd1⤵PID:497
-
/usr/sbin/systemsoundserverd/usr/sbin/systemsoundserverd1⤵PID:497
-
/usr/libexec/xpcproxyxpcproxy com.apple.pbs1⤵PID:499
-
/System/Library/CoreServices/pbs/System/Library/CoreServices/pbs1⤵PID:499
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:500
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:500