Analysis
- max time kernel
92s - max time network
114s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
04/11/2026, 18:13
Static task
static1
Behavioral task
behavioral1
Sample
darwin_arm64
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target darwin_arm64
- Size 33KB
- Sample261104-wtx2caev7l
- SHA256 b18c1106b0d879d6a60686fe36a9c6b4d440cc7d510a4e72e8767fbc0b802660
- MD5 9f7d503660df88d7c5b9cd5d0af6412e
- SHA1 ae6eb606090eab98d5096ef8fe8b48212a90026c
- SHA512 bd3d4b7fde80ee7eb93e4b1988c566f9a91dfaed0b3d0e624c8abb741d50efb46cf9770baac56101b44f3b79cc9206b5baeca0e26f001aad022de2e92ebe246b
- SSDEEP 48:MGLMqlGI9IKU2yqm3DaORJncf4gmJBkeDxPMRXOPlxkllLRgowjWaXLRgoz0MLAR:MGL7IKo4Gxcf/mJfUslilltg1jJtgSNu
- TLSH T180F25F139B1C0A61C15C633C92BB1B026236F5D086C56B674B10C72CAFCA3C5BDB5D8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/darwin_arm64\""1⤵PID:462
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/darwin_arm64\""1⤵PID:462
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/darwin_arm641⤵PID:462
-
/bin/zsh/bin/zsh -c /Users/run/darwin_arm642⤵PID:464
-
-
/Users/run/darwin_arm64/Users/run/darwin_arm642⤵PID:464
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:495
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:495