Overview
overview
4Static
static
1stagewise-...64.dmg
macos-10.15-amd64
1Install st...elease
macos-10.15-amd64
1Install st...lor.js
macos-10.15-amd64
4Install st...img.js
macos-10.15-amd64
4Install st....dylib
macos-10.15-amd64
4Install st...vsc.js
macos-10.15-amd64
4Install st...de.ps1
macos-10.15-amd64
4Install st...de.ps1
macos-10.15-amd64
4Install st...de.bat
macos-10.15-amd64
4Install st...ode.py
macos-10.15-amd64
4Install st...ode.py
macos-10.15-amd64
4Install st...ode.js
macos-10.15-amd64
4Install st...ode.js
macos-10.15-amd64
4Install st...ode.js
macos-10.15-amd64
4Install st...de.bat
macos-10.15-amd64
4Install st...de.bat
macos-10.15-amd64
4Install st...ode.js
macos-10.15-amd64
4Install st...ld.bat
macos-10.15-amd64
4Install st...ode.js
macos-10.15-amd64
4Install st...er2.js
macos-10.15-amd64
4Install st...ode.js
macos-10.15-amd64
4Install st...dex.js
macos-10.15-amd64
4Install st...ces.js
macos-10.15-amd64
4Install st...out.js
macos-10.15-amd64
4Install st...nal.js
macos-10.15-amd64
4Install st...est.js
macos-10.15-amd64
4Install st...de.map
macos-10.15-amd64
4Analysis
- max time kernel
357s - max time network
513s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
08/05/2026, 01:05
Static task
static1
Behavioral task
behavioral1
Sample
stagewise-prerelease-1.0.0-alpha086-arm64.dmg
Resource
macos-20250619-en
Behavioral task
behavioral2
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/MacOS/stagewise-prerelease
Resource
macos-20250619-en
Behavioral task
behavioral3
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@img/colour/color.js
Resource
macos-20250619-en
Behavioral task
behavioral4
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@img.js
Resource
macos-20250619-en
Behavioral task
behavioral5
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@img.dylib
Resource
macos-20250619-en
Behavioral task
behavioral6
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@vsc.js
Resource
macos-20250619-en
Behavioral task
behavioral7
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.ps1
Resource
macos-20250619-en
Behavioral task
behavioral8
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.ps1
Resource
macos-20250619-en
Behavioral task
behavioral9
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat
Resource
macos-20250619-en
Behavioral task
behavioral10
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.py
Resource
macos-20250619-en
Behavioral task
behavioral11
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.py
Resource
macos-20250619-en
Behavioral task
behavioral12
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.js
Resource
macos-20250619-en
Behavioral task
behavioral13
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.js
Resource
macos-20250619-en
Behavioral task
behavioral14
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.js
Resource
macos-20250619-en
Behavioral task
behavioral15
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat
Resource
macos-20250619-en
Behavioral task
behavioral16
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat
Resource
macos-20250619-en
Behavioral task
behavioral17
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.js
Resource
macos-20250619-en
Behavioral task
behavioral18
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/deps/winpty/vcbuild.bat
Resource
macos-20250619-en
Behavioral task
behavioral19
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.js
Resource
macos-20250619-en
Behavioral task
behavioral20
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/lib/eventEmitter2.js
Resource
macos-20250619-en
Behavioral task
behavioral21
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.js
Resource
macos-20250619-en
Behavioral task
behavioral22
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/lib/index.js
Resource
macos-20250619-en
Behavioral task
behavioral23
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/lib/interfaces.js
Resource
macos-20250619-en
Behavioral task
behavioral24
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/lib/shared/conout.js
Resource
macos-20250619-en
Behavioral task
behavioral25
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/lib/terminal.js
Resource
macos-20250619-en
Behavioral task
behavioral26
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/lib/terminal.test.js
Resource
macos-20250619-en
Behavioral task
behavioral27
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.map
Resource
macos-20250619-en
General
- Target Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@vsc.js
- Size 164KB
- Sample260508-bf2gdsfy2p
- SHA256 874f4a37c4beddef04d8eb9a8dbd28a65b63111f2d2123a38fd3f5333ee046dd
- MD5 9e08a3f2f579dad2530637338cced436
- SHA1 30cf3d543d853fd27baea4f1439189c48b35dfd6
- SHA512 dd50846fd3270b1f1b684559ddb521b43a7c1f874a94f2d043aee1aaa668cbbfa092c9727cf55cbd0fcb39bf3e014ec73668864ed1cf0481efd08de5ddf4da42
- SSDEEP 3072:CIuKKnYCtFqi7dQxW/eep1XdP0OfYHX3rw99AMy19lo6mieQQnmYWvuK0whVCcE+:CIuKKYCzqi724/71XdP0OfYW9w19lqqh
- TLSH T121F3D7181DFB11972D33A96CAB5FD60AB6F58087121CCE0C7DBCAA505F8327185ABBD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Resource Forking 1 TTPs 3 IoCs
Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.
ioc Process sh -c "sudo /bin/zsh -c \"/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@vsc.js\"" Process not Found sudo /bin/zsh -c "/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@vsc.js" Process not Found /bin/zsh -c "/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@vsc.js" Process not Found
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@vsc.js\""1⤵PID:496
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@vsc.js\""1⤵PID:496
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@vsc.js"1⤵PID:496
-
/bin/zsh/bin/zsh -c "/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@vsc.js"2⤵PID:497
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:519
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:519
-
/usr/libexec/xpcproxyxpcproxy com.apple.AccountPolicyHelper1⤵PID:521
-
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper1⤵PID:521
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:522
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:522