Overview
overview
6Static
static
1Disk Drill...T].dmg
macos-10.15-amd64
4Disk Drill...T].dmg
macos-10.15-amd64
4Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill... Drill
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill....dylib
macos-10.15-amd64
1Disk Drill...fbackd
macos-10.15-amd64
4Disk Drill...redisk
macos-10.15-amd64
4Disk Drill...redisk
macos-10.15-amd64
4Disk Drill...anager
macos-10.15-amd64
4Disk Drill...es/adb
macos-10.15-amd64
4Disk Drill...64_arm
debian-12-armhf
Disk Drill...rm_pie
debian-12-armhf
Disk Drill...64_x86
ubuntu-18.04-amd64
Disk Drill...86_pie
ubuntu-18.04-amd64
Disk Drill...fb-adb
macos-10.15-amd64
4Disk Drill....dylib
macos-10.15-amd64
4Disk Drill...ake_ro
ubuntu-18.04-amd64
1Disk Drill...ake_ro
debian-9-armhf
1Disk Drill...ake_ro
debian-9-mips
1Disk Drill...ake_ro
debian-9-mipsel
1Disk Drill...ake_rw
ubuntu-18.04-amd64
1Disk Drill...ake_rw
debian-9-armhf
1Disk Drill...ake_rw
debian-9-mips
1Disk Drill...ake_rw
debian-9-mipsel
1Disk Drill...runner
macos-10.15-amd64
4Disk Drill...nstall
ubuntu-18.04-amd64
6Disk Drill...nstall
debian-9-armhf
6Disk Drill...nstall
debian-9-mips
6Analysis
- max time kernel
86s - max time network
111s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
30/10/2026, 18:44
Static task
static1
Behavioral task
behavioral1
Sample
Disk Drill 4.6.370 [TNT].dmg
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral2
Sample
Disk Drill 4.6/Manual install/Disk Drill 4.6 [TNT].dmg
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral3
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libSoftMeter.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral4
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libcrypto.1.1.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral5
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Frameworks/libssl.1.1.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral6
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/Disk Drill
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral7
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libimobiledevice.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral8
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libplist.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral9
Sample
Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libusbmuxd.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral10
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/MacOS/cfbackd
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral11
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/Resources/SecureDisk.kext/Contents/MacOS/securedisk
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral12
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/BackService.app/Contents/Resources/SecureDisk_11.kext/Contents/MacOS/securedisk
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral13
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/SIP Manager.app/Contents/MacOS/SIP Manager
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral14
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/adb
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral15
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_arm
Resource
debian12-armhf-20260127-en
debian-12-armhf
Behavioral task
behavioral16
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_arm_pie
Resource
debian12-armhf-20260127-en
debian-12-armhf
Behavioral task
behavioral17
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_x86
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral18
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/dd64_x86_pie
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral19
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/fb-adb
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral20
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/libConfigurer64.dylib
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral21
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral22
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral23
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral24
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_ro
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral25
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral26
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral27
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral28
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/make_rw
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral29
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/runner
Resource
macos-20260915-en
macos-10.15-amd64
Behavioral task
behavioral30
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral31
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral32
Sample
Disk Drill 4.6/Disk Drill.app/Contents/Resources/uninstall
Resource
debian9-mipsbe-20260513-en
debian-9-mips
General
- Target Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libplist.dylib
- Size 223KB
- Sample261030-xdhr6aev9v
- SHA256 8ac8313664b7e8192346d8794e4e3ea1722dc1bb0451f9720cb7b355a121f432
- MD5 6c6eab8869f5c63ebf933af515ba562c
- SHA1 9b4e0352e5a573fb2c40e48c7f31eda61ac90fe2
- SHA512 bcce4a81bf1c7a9548850a4b3b2ffc3003b9fe689142448ed2a08137140623e143599da3dd20fd78c0d5328d750047e02c00646c6f4f6e8d29e837e946b1bb98
- SSDEEP 1536:2Qh2y3IZMNNSiSEff+xaNx/a/NWne/4P6gvKxkEYvpKwb1LUnu7CHUUh/7EtI+Bw:2jISuEzq/Nx/aVFpgv+uW+FDHMjI
- TLSH T1CB247D133B585819E8C8E03A9D8FC262D03BFDA85715551B7ACAF39C2F72F617A1621C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libplist.dylib\""1⤵PID:485
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libplist.dylib\""1⤵PID:485
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libplist.dylib"1⤵PID:485
-
/bin/zsh/bin/zsh -c "/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libplist.dylib"2⤵PID:486
-
-
/Users/run/Disk/Users/run/Disk Drill 4.6/Disk Drill.app/Contents/MacOS/libplist.dylib2⤵PID:486
-