Analysis
- max time kernel
78s - max time network
121s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
02/11/2026, 12:27
Static task
static1
Behavioral task
behavioral1
Sample
darwin_amd64
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target darwin_amd64
- Size 33KB
- Sample261102-pm286aws7n
- SHA256 8841f04b0c7ae1c85a325428cfc36643b022c0e1c2b55bc4da456dd4fdc68940
- MD5 ccfa730572cec49571144585e7d20880
- SHA1 db4eee4fd8ae83fda648ab07c231a0ac804a5fb4
- SHA512 2bbfe5d6737a68221cc452637c700f13b10136a0a43eff5c498e5d159f9aa797213922c0c5d1d09fc06f8fdedb9c49c31d5e4ae0d7c89a103c2ec357d412beba
- SSDEEP 96:x94ZZh5vvUWVZqDDt0TOTLZ0BbFw2bHKk6XrMclSibFqAMcl:z4ZZXvvHVZMt0TO2bVD/6bMclRbJMcl
- TLSH T10CE21B43AB4C8965C26D82301AF71BC6A615F5B09EA16B875750C7217EE17883C72E8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/darwin_amd64\""1⤵PID:466
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/darwin_amd64\""1⤵PID:466
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/darwin_amd641⤵PID:466
-
/bin/zsh/bin/zsh -c /Users/run/darwin_amd642⤵PID:467
-
-
/Users/run/darwin_amd64/Users/run/darwin_amd642⤵PID:467
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:500
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:500