Analysis
- max time kernel
78s - max time network
126s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
02/11/2026, 18:13
Static task
static1
Behavioral task
behavioral1
Sample
darwin_arm64
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target darwin_arm64
- Size 33KB
- Sample261102-wt38cses4p
- SHA256 242825b1847e121ee35417833fb8f858fb18f929233bba7a057d31dbae2df6c0
- MD5 1d2d4ec3a905fe6aad249dd9e43f8926
- SHA1 5f29ef93c87b50aae8f4b7f92fd19df59d619b66
- SHA512 030dee4694141550afa39dbde05728dbae8276bf6a15e238bf280c5777f2bcd48e0c454e1914762e3e85c6891f47f275ad46fd895a3033a65e0cdeb79bcc7d67
- SSDEEP 48:MGLMqlGI9IKU2yqm3DaORJncf4gmJBkeDxPMRyPlxkllLRgowjWaXLRgoz0MLAau:MGL7IKo4Gxcf/mJfJlilltg1jJtgSNu
- TLSH T161F25F139B1C0A61C45C633C92BB1B026276F5D086C56B674B10C72CAFCA3C5BDB5D8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/darwin_arm64\""1⤵PID:465
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/darwin_arm64\""1⤵PID:465
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/darwin_arm641⤵PID:465
-
/bin/zsh/bin/zsh -c /Users/run/darwin_arm642⤵PID:466
-
-
/Users/run/darwin_arm64/Users/run/darwin_arm642⤵PID:466
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:501
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:501