Overview
overview
6Static
static
1Disk Drill...T].dmg
macos-10.15-amd64
4Disk Drill...T].dmg
macos-10.15-amd64
4Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill... Drill
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill...fbackd
macos-10.15-amd64
4Disk Drill...redisk
macos-10.15-amd64
4Disk Drill...redisk
macos-10.15-amd64
4Disk Drill...anager
macos-10.15-amd64
4Disk Drill...es/adb
macos-10.15-amd64
4Disk Drill...64_arm
debian-12-armhf
Disk Drill...rm_pie
debian-12-armhf
Disk Drill...64_x86
ubuntu-18.04-amd64
Disk Drill...86_pie
ubuntu-18.04-amd64
Disk Drill...fb-adb
macos-10.15-amd64
4Disk Drill....dylib
macos-10.15-amd64
4Disk Drill...ake_ro
ubuntu-18.04-amd64
1Disk Drill...ake_ro
debian-9-armhf
1Disk Drill...ake_ro
debian-9-mips
1Disk Drill...ake_ro
debian-9-mipsel
1Disk Drill...ake_rw
ubuntu-18.04-amd64
1Disk Drill...ake_rw
debian-9-armhf
1Disk Drill...ake_rw
debian-9-mips
1Disk Drill...ake_rw
debian-9-mipsel
1Disk Drill...runner
macos-10.15-amd64
4Disk Drill...nstall
ubuntu-18.04-amd64
6Disk Drill...nstall
debian-9-armhf
6Disk Drill...nstall
debian-9-mips
6Analysis
- max time kernel
69s - max time network
105s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
30/10/2026, 18:44
Static task
static1
Behavioral task
behavioral1
Sample
Disk Drill 4.6.370 [TNT].dmg
Resource
macos-20260915-en
Behavioral task
behavioral2
Sample
Disk Drill 4.6/Manual install/Disk Drill 4.6 [TNT].dmg
Resource
macos-20260915-en
Behavioral task
behavioral3
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libSoftMeter.dylib
Resource
macos-20260915-en
Behavioral task
behavioral4
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libcrypto.1.1.dylib
Resource
macos-20260915-en
Behavioral task
behavioral5
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libssl.1.1.dylib
Resource
macos-20260915-en
Behavioral task
behavioral6
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/Disk Drill
Resource
macos-20260915-en
Behavioral task
behavioral7
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libimobiledevice.dylib
Resource
macos-20260915-en
Behavioral task
behavioral8
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libplist.dylib
Resource
macos-20260915-en
Behavioral task
behavioral9
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libusbmuxd.dylib
Resource
macos-20260915-en
Behavioral task
behavioral10
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/MacOS/cfbackd
Resource
macos-20260915-en
Behavioral task
behavioral11
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/Resources/SecureDisk.kext/Contents/MacOS/securedisk
Resource
macos-20260915-en
Behavioral task
behavioral12
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/Resources/SecureDisk_11.kext/Contents/MacOS/securedisk
Resource
macos-20260915-en
Behavioral task
behavioral13
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/SIP Manager.app/Contents/MacOS/SIP Manager
Resource
macos-20260915-en
Behavioral task
behavioral14
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/adb
Resource
macos-20260915-en
Behavioral task
behavioral15
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_arm
Resource
debian12-armhf-20260127-en
Behavioral task
behavioral16
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_arm_pie
Resource
debian12-armhf-20260127-en
Behavioral task
behavioral17
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_x86
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral18
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_x86_pie
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral19
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/fb-adb
Resource
macos-20260915-en
Behavioral task
behavioral20
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/libConfigurer64.dylib
Resource
macos-20260915-en
Behavioral task
behavioral21
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral22
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral23
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral24
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral25
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral26
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral27
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral28
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral29
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/runner
Resource
macos-20260915-en
Behavioral task
behavioral30
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral31
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral32
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall
Resource
debian9-mipsbe-20260513-en
General
- Target Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libimobiledevice.dylib
- Size 421KB
- Sample261030-xdhr6aev9v
- SHA256 ad9c5b54da6a1f61cf5782bf9cf9fc25a7469bc2d94cf7635ba0e59a53d96215
- MD5 ee671c830cb8189da04962023d4095d1
- SHA1 a230cef924ec111e8550d57809b2930a8f0a7402
- SHA512 8ac8a6d4e84acecfe9e78816b5aab0b4c60a0a6d34efd37a395b7628fbff3d20e64dac1e6873855e10887c8937992dcaa4ed23fcb7daa5ea5bf9c681cf0e5127
- SSDEEP 6144:nkC3mG8P/eDFRcGY08uDn903A5/3k5hUQ4rQoAy:u/eDFRcGY08uD903eA
- TLSH T175946C127F5C8C1ACDC2D47EDC2DD262A12BF1944B0552BBBFD9538C1FA9AA07A37214
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libimobiledevice.dylib\""1⤵PID:493
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libimobiledevice.dylib\""1⤵PID:493
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libimobiledevice.dylib"1⤵PID:493
-
/bin/zsh/bin/zsh -c "/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libimobiledevice.dylib"2⤵PID:494
-
-
/Users/run/Disk/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libimobiledevice.dylib2⤵PID:494
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:495
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:495
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.systemsoundserverd1⤵PID:497
-
/usr/sbin/systemsoundserverd/usr/sbin/systemsoundserverd1⤵PID:497
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:498
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:498
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:506
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:506