Overview
overview
6Static
static
1Disk Drill...T].dmg
macos-10.15-amd64
4Disk Drill...T].dmg
macos-10.15-amd64
4Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill... Drill
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill...fbackd
macos-10.15-amd64
4Disk Drill...redisk
macos-10.15-amd64
4Disk Drill...redisk
macos-10.15-amd64
4Disk Drill...anager
macos-10.15-amd64
4Disk Drill...es/adb
macos-10.15-amd64
4Disk Drill...64_arm
debian-12-armhf
Disk Drill...rm_pie
debian-12-armhf
Disk Drill...64_x86
ubuntu-18.04-amd64
Disk Drill...86_pie
ubuntu-18.04-amd64
Disk Drill...fb-adb
macos-10.15-amd64
4Disk Drill....dylib
macos-10.15-amd64
4Disk Drill...ake_ro
ubuntu-18.04-amd64
1Disk Drill...ake_ro
debian-9-armhf
1Disk Drill...ake_ro
debian-9-mips
1Disk Drill...ake_ro
debian-9-mipsel
1Disk Drill...ake_rw
ubuntu-18.04-amd64
1Disk Drill...ake_rw
debian-9-armhf
1Disk Drill...ake_rw
debian-9-mips
1Disk Drill...ake_rw
debian-9-mipsel
1Disk Drill...runner
macos-10.15-amd64
4Disk Drill...nstall
ubuntu-18.04-amd64
6Disk Drill...nstall
debian-9-armhf
6Disk Drill...nstall
debian-9-mips
6Analysis
- user interaction
yes - max time kernel
143s - max time network
150s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
30/10/2026, 18:44
Static task
static1
Behavioral task
behavioral1
Sample
Disk Drill 4.6.370 [TNT].dmg
Resource
macos-20260915-en
Behavioral task
behavioral2
Sample
Disk Drill 4.6/Manual install/Disk Drill 4.6 [TNT].dmg
Resource
macos-20260915-en
Behavioral task
behavioral3
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libSoftMeter.dylib
Resource
macos-20260915-en
Behavioral task
behavioral4
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libcrypto.1.1.dylib
Resource
macos-20260915-en
Behavioral task
behavioral5
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libssl.1.1.dylib
Resource
macos-20260915-en
Behavioral task
behavioral6
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/Disk Drill
Resource
macos-20260915-en
Behavioral task
behavioral7
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libimobiledevice.dylib
Resource
macos-20260915-en
Behavioral task
behavioral8
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libplist.dylib
Resource
macos-20260915-en
Behavioral task
behavioral9
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libusbmuxd.dylib
Resource
macos-20260915-en
Behavioral task
behavioral10
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/MacOS/cfbackd
Resource
macos-20260915-en
Behavioral task
behavioral11
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/Resources/SecureDisk.kext/Contents/MacOS/securedisk
Resource
macos-20260915-en
Behavioral task
behavioral12
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/Resources/SecureDisk_11.kext/Contents/MacOS/securedisk
Resource
macos-20260915-en
Behavioral task
behavioral13
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/SIP Manager.app/Contents/MacOS/SIP Manager
Resource
macos-20260915-en
Behavioral task
behavioral14
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/adb
Resource
macos-20260915-en
Behavioral task
behavioral15
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_arm
Resource
debian12-armhf-20260127-en
Behavioral task
behavioral16
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_arm_pie
Resource
debian12-armhf-20260127-en
Behavioral task
behavioral17
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_x86
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral18
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_x86_pie
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral19
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/fb-adb
Resource
macos-20260915-en
Behavioral task
behavioral20
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/libConfigurer64.dylib
Resource
macos-20260915-en
Behavioral task
behavioral21
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral22
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral23
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral24
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral25
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral26
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral27
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral28
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral29
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/runner
Resource
macos-20260915-en
Behavioral task
behavioral30
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral31
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral32
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall
Resource
debian9-mipsbe-20260513-en
General
- Target Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libssl.1.1.dylib
- Size 2.5MB
- Sample261030-xdhr6aev9v
- SHA256 f27b987c7284024120cc3f5f29ade604899ec42e85d690f89c90e049a7b64c19
- MD5 e07f14c6daf4f9c965e0de3c0be3088a
- SHA1 659868fc89a77d3fa5fb60430dbcd03679582f65
- SHA512 3b44a08438beb0cf5e622dee64ac1f462397b0ccf777c7b4c4de6281cb604c686b54c6b1c8bc00cf3ad38b88c88e8ddee72bf9f6db8a1ced381f06660d635f92
- SSDEEP 49152:QRTPiZEcdfE1ntTK0q9VyPnrsktWYGvW0wW27g2E2eJUf/zsHV1PEaZE2eJU:GQEFtK9VyPnrsktWYGPwW27g2E2eJUXY
- TLSH T149C5AD25BA7959A6C4C4E23D8EBF4375633BF9548F00D6A337E5EB3C3DE029869A1104
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libssl.1.1.dylib\""1⤵PID:490
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libssl.1.1.dylib\""1⤵PID:490
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libssl.1.1.dylib"1⤵PID:490
-
/bin/zsh/bin/zsh -c "/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libssl.1.1.dylib"2⤵PID:491
-
-
/Users/run/Disk/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libssl.1.1.dylib2⤵PID:491
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:500
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:500
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:512
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:512