Analysis
- max time kernel
65s - max time network
120s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
02/11/2026, 18:12
Static task
static1
Behavioral task
behavioral1
Sample
darwin_amd64
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target darwin_amd64
- Size 33KB
- Sample261102-wthawsbz4x
- SHA256 02b6fe82b0856a9f6fb81fc9e446cbb2e6d64f703b318c3867df5336203a15e5
- MD5 d902935a71fc7c00813d2f00383514f1
- SHA1 38912ff1d13c10e92e4f7f177f276220caf3d724
- SHA512 7c3093a76f9bf4205277ee8dbfbe127869bc24f47e952af109361260e6fdde22b1f656b241fbd67a2f7c1cc916111bcf396e9ab7660f5c8444f323610cc09612
- SSDEEP 96:x94ZZh5vvUDVZqDDt0TOTLZ0BbFw2kHKk6XrMclSibFqAMcl:z4ZZXvv2VZMt0TO2bVM/6bMclRbJMcl
- TLSH T110E22D43AB4C8965C26D42301AF71BC6A615F5B09EE26B875750C7217EE17883C72E8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/darwin_amd64\""1⤵PID:461
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/darwin_amd64\""1⤵PID:461
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/darwin_amd641⤵PID:461
-
/bin/zsh/bin/zsh -c /Users/run/darwin_amd642⤵PID:463
-
-
/Users/run/darwin_amd64/Users/run/darwin_amd642⤵PID:463
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:496
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:496