Overview
overview
6Static
static
1Disk Drill...T].dmg
macos-10.15-amd64
4Disk Drill...T].dmg
macos-10.15-amd64
4Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill... Drill
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill...fbackd
macos-10.15-amd64
4Disk Drill...redisk
macos-10.15-amd64
4Disk Drill...redisk
macos-10.15-amd64
4Disk Drill...anager
macos-10.15-amd64
4Disk Drill...es/adb
macos-10.15-amd64
4Disk Drill...64_arm
debian-12-armhf
Disk Drill...rm_pie
debian-12-armhf
Disk Drill...64_x86
ubuntu-18.04-amd64
Disk Drill...86_pie
ubuntu-18.04-amd64
Disk Drill...fb-adb
macos-10.15-amd64
4Disk Drill....dylib
macos-10.15-amd64
4Disk Drill...ake_ro
ubuntu-18.04-amd64
1Disk Drill...ake_ro
debian-9-armhf
1Disk Drill...ake_ro
debian-9-mips
1Disk Drill...ake_ro
debian-9-mipsel
1Disk Drill...ake_rw
ubuntu-18.04-amd64
1Disk Drill...ake_rw
debian-9-armhf
1Disk Drill...ake_rw
debian-9-mips
1Disk Drill...ake_rw
debian-9-mipsel
1Disk Drill...runner
macos-10.15-amd64
4Disk Drill...nstall
ubuntu-18.04-amd64
6Disk Drill...nstall
debian-9-armhf
6Disk Drill...nstall
debian-9-mips
6Analysis
- max time kernel
69s - max time network
106s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
30/10/2026, 18:44
Static task
static1
Behavioral task
behavioral1
Sample
Disk Drill 4.6.370 [TNT].dmg
Resource
macos-20260915-en
Behavioral task
behavioral2
Sample
Disk Drill 4.6/Manual install/Disk Drill 4.6 [TNT].dmg
Resource
macos-20260915-en
Behavioral task
behavioral3
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libSoftMeter.dylib
Resource
macos-20260915-en
Behavioral task
behavioral4
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libcrypto.1.1.dylib
Resource
macos-20260915-en
Behavioral task
behavioral5
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libssl.1.1.dylib
Resource
macos-20260915-en
Behavioral task
behavioral6
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/Disk Drill
Resource
macos-20260915-en
Behavioral task
behavioral7
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libimobiledevice.dylib
Resource
macos-20260915-en
Behavioral task
behavioral8
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libplist.dylib
Resource
macos-20260915-en
Behavioral task
behavioral9
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libusbmuxd.dylib
Resource
macos-20260915-en
Behavioral task
behavioral10
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/MacOS/cfbackd
Resource
macos-20260915-en
Behavioral task
behavioral11
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/Resources/SecureDisk.kext/Contents/MacOS/securedisk
Resource
macos-20260915-en
Behavioral task
behavioral12
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/Resources/SecureDisk_11.kext/Contents/MacOS/securedisk
Resource
macos-20260915-en
Behavioral task
behavioral13
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/SIP Manager.app/Contents/MacOS/SIP Manager
Resource
macos-20260915-en
Behavioral task
behavioral14
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/adb
Resource
macos-20260915-en
Behavioral task
behavioral15
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_arm
Resource
debian12-armhf-20260127-en
Behavioral task
behavioral16
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_arm_pie
Resource
debian12-armhf-20260127-en
Behavioral task
behavioral17
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_x86
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral18
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_x86_pie
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral19
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/fb-adb
Resource
macos-20260915-en
Behavioral task
behavioral20
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/libConfigurer64.dylib
Resource
macos-20260915-en
Behavioral task
behavioral21
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral22
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral23
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral24
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral25
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral26
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral27
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral28
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral29
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/runner
Resource
macos-20260915-en
Behavioral task
behavioral30
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral31
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral32
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall
Resource
debian9-mipsbe-20260513-en
General
- Target Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libSoftMeter.dylib
- Size 533KB
- Sample261030-xdhr6aev9v
- SHA256 ddd6ce29f518e28a4c26edea394a4afa64c9dbda0c11043deaf75dfc07a12e06
- MD5 56e38e8706db8f08bde798561070263f
- SHA1 9e170cd14b8a99629009ed9a76a3cf427b650b7b
- SHA512 0bbdb0ed3f85e498b107c7f5d608563d5f28f44ae59f720319b211a6a3abc961d781c1d4130017dbdec9d3899432a4aabb423bf7604f9c4de7f3a1ab836920ba
- SSDEEP 6144:loagdZxPNFDmhDVaOiOn1tlKZt2Uo0hdIHnrikBhKSk9c8VLUdhrVh7e69L396I4:loag31NpmjXiaGZt2UyFsLUd9dJgdr
- TLSH T105C44C132FADA922CCD573BC5E9B1166E733FE011F70D2E96B9192284FF13A5A616301
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libSoftMeter.dylib\""1⤵PID:493
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libSoftMeter.dylib\""1⤵PID:493
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libSoftMeter.dylib"1⤵PID:493
-
/bin/zsh/bin/zsh -c "/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libSoftMeter.dylib"2⤵PID:494
-
-
/Users/run/Disk/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libSoftMeter.dylib2⤵PID:494
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:495
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:495
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.systemsoundserverd1⤵PID:497
-
/usr/sbin/systemsoundserverd/usr/sbin/systemsoundserverd1⤵PID:497
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:498
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:498
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:507
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:507