Analysis
- max time kernel
120s - max time network
148s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
07/10/2026, 19:53
Static task
static1
Behavioral task
behavioral1
Sample
sync_diagnostic.log
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
sync_diagnostic.log
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
sync_diagnostic.log
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
sync_diagnostic.log
Resource
android-x64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
sync_diagnostic.log
Resource
android-x64-arm64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
sync_diagnostic.log
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target sync_diagnostic.log
- Size 23KB
- Sample261007-yl3b7sd17s
- SHA256 43bd8a0e0f2c45e706c360b0b8042324e5589afee99c049179f0d2f924b642d4
- MD5 8ec6cbfbce8578170e461e0299beeb07
- SHA1 e0a04b27db44569fcf182107c6911d3001d5d600
- SHA512 cef756f8bbc0868fa33e350240fe31da8b65f718b20f8afe3e82c9a9f608a148767d2c2e2690b339029d767b701cbc8e8ac533857f3cd31743a800fa5dc4059d
- SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXw3xN:OtfFvpopPxrB4RhfwhN
- TLSH T1D3B2351471BA021138FE790881B6872F464232B37259E63B7FBD14A69E6BF045CFD8C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/usr/libexec/xpcproxyxpcproxy com.apple.csrutil.report1⤵PID:467
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/sync_diagnostic.log\""1⤵PID:468
-
/usr/libexec/xpcproxyxpcproxy com.apple.emond.aslmanager1⤵PID:469
-
/usr/bin/csrutil/usr/bin/csrutil report1⤵PID:467
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/sync_diagnostic.log\""1⤵PID:468
-
/usr/sbin/aslmanager/usr/sbin/aslmanager -s /var/log/eventmonitor1⤵PID:469
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/sync_diagnostic.log1⤵PID:468
-
/bin/zsh/bin/zsh -c /Users/run/sync_diagnostic.log2⤵PID:471
-
-
/Users/run/sync_diagnostic.log/Users/run/sync_diagnostic.log2⤵PID:471
-
-
/bin/shsh /Users/run/sync_diagnostic.log2⤵PID:471
-
-
/bin/bashsh /Users/run/sync_diagnostic.log2⤵PID:471
-
-
/usr/sbin/newsyslog/usr/sbin/newsyslog1⤵PID:466
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.systemsoundserverd1⤵PID:890
-
/usr/sbin/systemsoundserverd/usr/sbin/systemsoundserverd1⤵PID:890
-
/usr/libexec/xpcproxyxpcproxy com.apple.pbs1⤵PID:893
-
/System/Library/CoreServices/pbs/System/Library/CoreServices/pbs1⤵PID:893
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:894
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:894