Analysis
- max time kernel
65s - max time network
114s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
10/11/2026, 05:55
Static task
static1
Behavioral task
behavioral1
Sample
Tantalum_macOS.zip
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target Tantalum_macOS.zip
- Size 48.3MB
- Sample261110-gmqlcsdc44
- SHA256 270ccd9f0268c27680d23bece03521c8b2977aad759edc6dc7b0d2974486a30b
- MD5 67267c64bf3e04964e5736ae3b9c053d
- SHA1 aa1262c8475550540b9330dd5e11c3b0c59694d0
- SHA512 7c56708c3744d71af0c393f6c89638856656917cd08dddb674261560aa4b8e7cd682fc9d676c06086a3a606e6390fb8c444d47832c2c9238c23d31f440c5714a
- SSDEEP 1572864:zaLZ5PXUbrYNGdz82DOxYyRzYSbY2lTfrx3btLPAGb:zaLobU0dz82D7yRza2lrH3
- TLSH T17CB73300A8A9C0CDDDA2FA750F9C39B6D27CB50E01D6982CD95D41F756C3AEB4A33678
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Tantalum_macOS.zip\""1⤵PID:464
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Tantalum_macOS.zip\""1⤵PID:464
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Tantalum_macOS.zip1⤵PID:464
-
/bin/zsh/bin/zsh -c /Users/run/Tantalum_macOS.zip2⤵PID:465
-
-
/Users/run/Tantalum_macOS.zip/Users/run/Tantalum_macOS.zip2⤵PID:465
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:498
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:498