Open-source atomic malware analysis

Analyze another

peass-ng/PEASS-ng

MACHO
Verdict: SUSPICIOUS
AI PEASS-ng privilege escalation tool
Mal-ecule
H₂(F₂Po₄)Md(Bi)
Size 3.8 MB download
First seen 15 days ago
Analyzed 5 days ago
Ecosystem github
Source github.com
peass-ng-PEASS-ng-20260803-00785084-linpeas_darwin_amd64 macho
0xac81d 64207473282e2e2e290a206d3d6e696c d ts(...). m=nil
0xac82d 20626173652068616e6775706b696c6c base hangupkill
0xac83d 65646572726e6f20726474736370706f ederrno rdtscppo
0xac84d 70636e74636d642f676f6e6574646e73 pcntcmd/gonetdns
0xac85d 2f62696e2f7368666c6f61743332666c /bin/shfloat32fl
0xac86d 6f617436342028747261702054756573 oat64 (trap Tues
0xac87d 6461794a616e756172794f63746f6265 dayJanuaryOctobe
0xac88d 72313935333132353937363536323569 r19531259765625i
0xac89d 6e76616c696475696e74707472436861 nvaliduintptrCha
0xac8ad 6e4469722056616c75653e666f726365 nDir Value>force
0xac8bd 6763616c6c6f636d5763707570726f66 gcallocmWcpuprof
0xac8cd 616c6c6f636d52756e6b6e6f776e6763 allocmRunknowngc
0xac8dd 7472616365494f traceIO
0xaca3f 206d696e70633d200976616c75653d20 minpc= .value=
0xaca4f 287363616e29097479706573203a2074 (scan).types : t
0xaca5f 79706520617678353132666f732f6578 ype avx512fos/ex
0xaca6f 656372756e74696d65746c7333646573 ecruntimetls3des
0xaca7f 2f62696e2f7a73682f62696e2f6b7368 /bin/zsh/bin/ksh
0xaca8f 2f62696e2f637368476f537472696e67 /bin/cshGoString
0xaca9f 7369676e616c3a205468757273646179 signal: Thursday
0xacaaf 53617475726461794665627275617279 SaturdayFebruary
0xacabf 4e6f76656d626572446563656d626572 NovemberDecember
0xacacf 25214d6f6e7468283438383238313235 %!Month(48828125
0xacadf 6e696c20506f6f6c73636176656e6765 nil Poolscavenge
0xacaef 706f6c6c446573637472616365427566 pollDesctraceBuf
0xacaff 646561646c6f636b deadlock
0xadd02 6b72756e74696d652e476f7363686564 kruntime.Gosched
0xadd12 6d616c6c6f6320646561646c6f636b72 malloc deadlockr
0xadd22 756e74696d65206572726f723a202020 untime error:
0xadd32 776974682047432070726f670a736361 with GC prog.sca
0xadd42 6e206d6973736564206120676d697361 n missed a gmisa
0xadd52 6c69676e6564206d61736b72756e7469 ligned maskrunti
0xadd62 6d653a206d696e203d2072756e74696d me: min = runtim
0xadd72 653a20696e5573653d72756e74696d65 e: inUse=runtime
0xadd82 3a206d6178203d207265717565737465 : max = requeste
0xadd92 6420736b d sk
0x3c92df 70656e6452756e654e6f6e4153434949 pendRuneNonASCII
0x3c92ef 005f756e69636f64652f757466382e66 ._unicode/utf8.f
0x3c92ff 69727374005f5f5f6572726f72005f5f irst.___error.__
0x3c930f 65786974005f6368646972005f63686d exit._chdir._chm
0x3c931f 6f64005f6368726f6f74005f636c6f63 od._chroot._cloc
0x3c932f 6b5f67657474696d65005f636c6f7365 k_gettime._close
0x3c933f 005f636c6f7365646972005f64757032 ._closedir._dup2Fork-exec with piped stdio
0x3c934f 005f657865637665005f666163636573 ._execve._faccesChild process stdio pipe redirect
0x3c935f 736174005f66636e746c005f666f726b sat._fcntl._forkProcess creation via fork or clone
0x3c936f 005f66737461743634005f6765746377 ._fstat64._getcwRead file status and metadata (legacy 64-bit)
0x3c937f 64005f676574706964005f676574726c d._getpid._getrl
0x3c938f 696d6974005f696f63746c005f697373 imit._ioctl._iss
0x3c939f 657475676964005f6b6576656e74005f etugid._kevent._
0x3c93af 6b696c6c005f6b7175657565005f6c73 kill._kqueue._ls
0x3c93bf 65656b005f6d6163685f6162736f6c75 eek._mach_absolu
0x3c93cf 74655f74696d65005f6d6163685f7469 te_time._mach_ti
0x3c93df 6d65626173655f696e666f005f6d6164 mebase_info._mad
0x3c93ef 76697365005f6d6d6170005f6d756e6d vise._mmap._munm
0x3c93ff 6170005f6e6f746966795f69735f7661 ap._notify_is_va
0x3c940f 6c69645f746f6b656e005f6f70656e00 lid_token._open.
0x3c941f 5f70697065005f707468726561645f61 _pipe._pthread_a
0x3c942f 7474725f676574737461636b73697a65 ttr_getstacksize
0x3c943f 005f707468726561645f617474725f69 ._pthread_attr_i
0x3c944f 6e6974005f707468726561645f617474 nit._pthread_att
0x3c945f 725f7365746465746163687374617465 r_setdetachstate
0x3c946f 005f707468726561645f636f6e645f69 ._pthread_cond_i
0x3c947f 6e6974005f nit._
0x3c94a0 5f636f6e645f74696d6564776169745f _cond_timedwait_
0x3c94b0 72656c61746976655f6e70005f707468 relative_np._pth
0x3c94c0 726561645f636f6e645f77616974005f read_cond_wait._
0x3c94d0 707468726561645f637265617465005f pthread_create._
0x3c94e0 707468726561645f6b696c6c005f7074 pthread_kill._pt
0x3c94f0 68726561645f6d757465785f696e6974 hread_mutex_init
0x3c9500 005f707468726561645f6d757465785f ._pthread_mutex_
0x3c9510 6c6f636b005f707468726561645f6d75 lock._pthread_mu
0x3c9520 7465785f756e6c6f636b005f70746872 tex_unlock._pthr
0x3c9530 6561645f73656c66005f707468726561 ead_self._pthrea
0x3c9540 645f7369676d61736b005f7074726163 d_sigmask._ptrac
0x3c9550 65005f7261697365005f72656164005f e._raise._read._
0x3c9560 736574676964005f73657467726f7570 setgid._setgroup
0x3c9570 73005f73657470676964005f73657472 s._setpgid._setr
0x3c9580 6c696d6974005f736574736964005f73 limit._setsid._sImports POSIX setsid API
0x3c9590 6574756964005f736967616374696f6e etuid._sigaction
0x3c95a0 005f736967616c74737461636b005f73 ._sigaltstack._sRead file status and metadata (legacy 64-bit)
0x3c95b0 7461743634005f73797363746c005f75 tat64._sysctl._u
0x3c95c0 736c656570005f7761697434005f7772 sleep._wait4._wr
0x3c95d0 697465005f7870635f646174655f6372 ite._xpc_date_cr
0x3c95e0 656174655f66726f6d5f63757272656e eate_from_curren
0x3c95f0 74000000000000000000000000000000 t...............

Micro-behaviors

Metadata

Identity

SHA-256 30b0f1aaa76d0b9ec8ada37d2cbb10c926fb205ee0c96f67ad8ca236abdce403
Filename peass-ng-PEASS-ng-20260803-00785084-linpeas_darwin_amd64
Package peass-ng/PEASS-ng

Origin

Source harvest
Feed github.com
Ecosystem github
Domain github.com

Timeline

First seen 8 Aug 2026 14:42 UTC
First analyzed 17 Aug 2026 23:26 UTC
Last analyzed 17 Aug 2026 23:26 UTC
Last updated 17 Aug 2026 23:26 UTC

Labeling

Label unknown
Label source harvest
Traits version 18b13