Analysis
- max time kernel
77s - max time network
125s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
02/11/2026, 06:19
Static task
static1
Behavioral task
behavioral1
Sample
darwin_arm64
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target darwin_arm64
- Size 33KB
- Sample261102-g3f2vsec66
- SHA256 a00af74078f21c1eaf2aa19b0d1994d002bd415e44e04f51089e9111b82c3276
- MD5 3cab6a6ffeff0fa5284fc44643a16f38
- SHA1 eb2791df694baa335208440d8cbcddf4186f8475
- SHA512 cb90181d8dd547920b978a23c7707e14101c4f2a38084d8cb419776cfeaa99b3e8db392a3de82b569d1d7d814385b4bcc1f60418db6e460a6899d529345ccd1e
- SSDEEP 96:RUdKC8jTDj5lpWK7iHp4z1dgngS6BndngN/4B0:RUdp8j3jvpWK7upMdgngBFdngN/4B0
- TLSH T1DFF283239B1C5922C44C663C42BF6742A23AF1A105D673774B00872DAFCA3C5B9E5D87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/darwin_arm64\""1⤵PID:465
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/darwin_arm64\""1⤵PID:465
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/darwin_arm641⤵PID:465
-
/bin/zsh/bin/zsh -c /Users/run/darwin_arm642⤵PID:467
-
-
/Users/run/darwin_arm64/Users/run/darwin_arm642⤵PID:467
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:499
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:499