Analysis
- max time kernel
70s - max time network
121s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
02/11/2026, 12:20
Static task
static1
Behavioral task
behavioral1
Sample
darwin_arm64
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target darwin_arm64
- Size 33KB
- Sample261102-phsh6av13r
- SHA256 785e11a71fab4d1dd0295538b71bae07b80459597c3bab97e4e7d3b90cba9246
- MD5 cf4477eeac8fb4e1407cffaf862d6041
- SHA1 6cbdda3e725e6380c8220b2ed2a4ce3c353e4483
- SHA512 43ec8f0176670fb9d36319c01e2521d56280e10e30576a9386b4a26d9b4bcdc6e661fedea920e19c44cea3acf3e58d9085c42f59a1b7361011231b7dea127927
- SSDEEP 96:RUdKC8jTDj5lpWK7FHh4z1dgngS6BndngN/4B0:RUdp8j3jvpWK7BhMdgngBFdngN/4B0
- TLSH T138F263239B1C5922C48C623C42BB6742A23AF1E145DA77774B04872DAFCA3C5B9E5D87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/darwin_arm64\""1⤵PID:466
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/darwin_arm64\""1⤵PID:466
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/darwin_arm641⤵PID:466
-
/bin/zsh/bin/zsh -c /Users/run/darwin_arm642⤵PID:468
-
-
/Users/run/darwin_arm64/Users/run/darwin_arm642⤵PID:468
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:497
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:497