Analysis
- max time kernel
78s - max time network
137s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
02/11/2026, 06:12
Static task
static1
Behavioral task
behavioral1
Sample
darwin_amd64
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target darwin_amd64
- Size 33KB
- Sample261102-gyaz2sft21
- SHA256 351b9a353934beb1a12c467ed7395df6e0c42c8279201c358ec0ab36e114c47e
- MD5 ae962f2b1b12be17d74ed38df767777a
- SHA1 7eb646f7d08ba8fd288f1e1ad20318ab53a0a75e
- SHA512 4c6826e1d95353c547771f90cae793696d32def5f29fe82b0780c6a921d330bb1d9f29f7b48ea86c6ae09895937e3e755a16415443a9dedb9f3ab0ce4e47b66b
- SSDEEP 96:xcIZEl05DbDP67li97WsCBwYjqclS06W1YbqclSl:GI2m5DbDyzwYjqcll6W+qclW
- TLSH T15AE24F43675C5929D05D83B922FB5B976609F8A009D45B432F50DA282FE23C47CB0EDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/darwin_amd64\""1⤵PID:466
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/darwin_amd64\""1⤵PID:466
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/darwin_amd641⤵PID:466
-
/bin/zsh/bin/zsh -c /Users/run/darwin_amd642⤵PID:467
-
-
/Users/run/darwin_amd64/Users/run/darwin_amd642⤵PID:467
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:499
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:499