Analysis
- max time kernel
147s - max time network
137s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
02/11/2026, 18:15
Static task
static1
Behavioral task
behavioral1
Sample
darwin_amd64
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target darwin_amd64
- Size 33KB
- Sample261102-wv8t8sys4k
- SHA256 6732f59ec8615c7d4dc488040d7699ffc20974151e690942d00fa202483781ea
- MD5 7f5ec7020e4ae92b2aa2e2de7a8e9e63
- SHA1 1ba35be98eeae3aed3ba986794c11f846b694177
- SHA512 59e95aa730e56666fa1d497033d96e3f215b127380828d73abda182dc28bf0103e88465ef0505554aee100c677c1e87c3fe656adb765c5f16d9dec1ae26048d7
- SSDEEP 96:xcIZEn5DbDP67li97WsCVwYjqclS06W1YbqclSl:GI2n5DbDy3wYjqcll6W+qclW
- TLSH T1C2E24E43675C5929D05D83BA22FB1B976609F8A009D45B432F50DA282FE23C47CB0EDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/darwin_amd64\""1⤵PID:463
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/darwin_amd64\""1⤵PID:463
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/darwin_amd641⤵PID:463
-
/bin/zsh/bin/zsh -c /Users/run/darwin_amd642⤵PID:466
-
-
/Users/run/darwin_amd64/Users/run/darwin_amd642⤵PID:466
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:509
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:509