Analysis
- max time kernel
148s - max time network
104s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
04/11/2026, 18:15
Static task
static1
Behavioral task
behavioral1
Sample
darwin_arm64
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target darwin_arm64
- Size 33KB
- Sample261104-wwc4ystvbx
- SHA256 f894efb90f3509ae7f50c2142bf906d0b25d6a5f3ff30887cf8ff7c0821c2a96
- MD5 26305faed07288a72efaecec2cfe5f45
- SHA1 b32b6e60d1b11c527313ec0d87309e9e19159031
- SHA512 d3aefef315f2409b1a12c8718cb404081034d8c6763feac486a4cd1392b930a594da597ebca40ce2d97071d493ed1368f72b79a0dc1e3e8aa85f6510b466341e
- SSDEEP 96:RUdKC8jTDj5lpWK78HA4z1dgngS6BndngN/4B0:RUdp8j3jvpWK7kAMdgngBFdngN/4B0
- TLSH T12CF263239B2C5922C44C623C42BB6742A23AF1E145D577774B04872DAFCA3C5BDE5D87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/darwin_arm64\""1⤵PID:462
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/darwin_arm64\""1⤵PID:462
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/darwin_arm641⤵PID:462
-
/bin/zsh/bin/zsh -c /Users/run/darwin_arm642⤵PID:463
-
-
/Users/run/darwin_arm64/Users/run/darwin_arm642⤵PID:463
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:506
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:506