707bf0a26a49441060bf737f46f26e1fe4ae4cff4d794aaf35011fb0f4b59463

Login
Reports

Overview

overview

Static

static

Disk Drill...T].dmg

macos-10.15-amd64

Disk Drill...T].dmg

macos-10.15-amd64

Disk Drill....dylib

macos-10.15-amd64

Disk Drill....dylib

macos-10.15-amd64

Disk Drill....dylib

macos-10.15-amd64

Disk Drill... Drill

macos-10.15-amd64

Disk Drill....dylib

macos-10.15-amd64

Disk Drill....dylib

macos-10.15-amd64

Disk Drill....dylib

macos-10.15-amd64

Disk Drill...fbackd

macos-10.15-amd64

Disk Drill...redisk

macos-10.15-amd64

Disk Drill...redisk

macos-10.15-amd64

Disk Drill...anager

macos-10.15-amd64

Disk Drill...es/adb

macos-10.15-amd64

Disk Drill...64_arm

debian-12-armhf

Disk Drill...rm_pie

debian-12-armhf

Disk Drill...64_x86

ubuntu-18.04-amd64

Disk Drill...86_pie

ubuntu-18.04-amd64

Disk Drill...fb-adb

macos-10.15-amd64

Disk Drill....dylib

macos-10.15-amd64

Disk Drill...ake_ro

ubuntu-18.04-amd64

Disk Drill...ake_ro

debian-9-armhf

Disk Drill...ake_ro

debian-9-mips

Disk Drill...ake_ro

debian-9-mipsel

Disk Drill...ake_rw

ubuntu-18.04-amd64

Disk Drill...ake_rw

debian-9-armhf

Disk Drill...ake_rw

debian-9-mips

Disk Drill...ake_rw

debian-9-mipsel

Disk Drill...runner

macos-10.15-amd64

Disk Drill...nstall

ubuntu-18.04-amd64

Disk Drill...nstall

debian-9-armhf

Disk Drill...nstall

debian-9-mips

Analysis

max time kernel
83s
max time network
134s
platform
macos-10.15_amd64
resource
macos-20260915-en
resource tags

arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
30/10/2026, 18:44

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Disk Drill 4.6.370 [TNT].dmg

Resource

macos-20260915-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral2

Sample

Disk Drill 4.6/Manual install/Disk Drill 4.6 [TNT].dmg

Resource

macos-20260915-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral3

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libSoftMeter.dylib

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libcrypto.1.1.dylib

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libssl.1.1.dylib

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Disk Drill 4.6/Disk Drill.app/Contents/MacOS/Disk Drill

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libimobiledevice.dylib

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libplist.dylib

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libusbmuxd.dylib

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/MacOS/cfbackd

Resource

macos-20260915-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral11

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/Resources/SecureDisk.kext/Contents/MacOS/securedisk

Resource

macos-20260915-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral12

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/Resources/SecureDisk_11.kext/Contents/MacOS/securedisk

Resource

macos-20260915-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral13

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/SIP Manager.app/Contents/MacOS/SIP Manager

Resource

macos-20260915-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral14

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/adb

Resource

macos-20260915-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral15

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_arm

Resource

debian12-armhf-20260127-en

debian-12-armhf

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_arm_pie

Resource

debian12-armhf-20260127-en

debian-12-armhf

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_x86

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_x86_pie

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/fb-adb

Resource

macos-20260915-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral20

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/libConfigurer64.dylib

Resource

macos-20260915-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral21

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/runner

Resource

macos-20260915-en

macos-10.15-amd64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral30

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery

Behavioral task

behavioral31

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall

Resource

debian9-armhf-20260513-en

debian-9-armhf

3 signatures

150 seconds

discovery

Behavioral task

behavioral32

Sample

Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall

Resource

debian9-mipsbe-20260513-en

debian-9-mips

3 signatures

150 seconds

discovery

Report Analysis Logs

General

Target
Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libcrypto.1.1.dylib
Size 10.8MB
Sample261030-xdhr6aev9v
SHA256 707bf0a26a49441060bf737f46f26e1fe4ae4cff4d794aaf35011fb0f4b59463
MD5 fb82e35a9ddab586936c80b88dbb4305
SHA1 58a00f3d1291031694e21f05988f38b3fbc46d83
SHA512 b867bc6278d43277b92f9f010151f269f40764250242a16d881711b3bc50d7991347ab433fe805d33adc18851bf6399418c1cc83fe4e9ea475ee51d8f0e3b9d9
SSDEEP 196608:OPw2xWNnlnUByPludwW1dptW0JMLT/nxXsPJQYOEjkPt2E9WL62eJUWGsM7LCbF+:OpANnlnUByPludwW1dptW0JMLTxXs+Eg
TLSH
T14FB6AE1A7AA84966D089A33C9DFF42B9537AF5048F14E39737E5EB2C3DE0354B931260
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libcrypto.1.1.dylib\""
1⤵
PID:488

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libcrypto.1.1.dylib\""
1⤵
PID:488

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libcrypto.1.1.dylib"
1⤵
PID:488
- /bin/zsh
  /bin/zsh -c "/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libcrypto.1.1.dylib"
  2⤵
  PID:489
- /Users/run/Disk
  /Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libcrypto.1.1.dylib
  2⤵
  PID:489

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads