Overview
overview
4Static
static
1stagewise-...64.dmg
macos-10.15-amd64
1Install st...elease
macos-10.15-amd64
1Install st...lor.js
macos-10.15-amd64
4Install st...img.js
macos-10.15-amd64
4Install st....dylib
macos-10.15-amd64
4Install st...vsc.js
macos-10.15-amd64
4Install st...de.ps1
macos-10.15-amd64
4Install st...de.ps1
macos-10.15-amd64
4Install st...de.bat
macos-10.15-amd64
4Install st...ode.py
macos-10.15-amd64
4Install st...ode.py
macos-10.15-amd64
4Install st...ode.js
macos-10.15-amd64
4Install st...ode.js
macos-10.15-amd64
4Install st...ode.js
macos-10.15-amd64
4Install st...de.bat
macos-10.15-amd64
4Install st...de.bat
macos-10.15-amd64
4Install st...ode.js
macos-10.15-amd64
4Install st...ld.bat
macos-10.15-amd64
4Install st...ode.js
macos-10.15-amd64
4Install st...er2.js
macos-10.15-amd64
4Install st...ode.js
macos-10.15-amd64
4Install st...dex.js
macos-10.15-amd64
4Install st...ces.js
macos-10.15-amd64
4Install st...out.js
macos-10.15-amd64
4Install st...nal.js
macos-10.15-amd64
4Install st...est.js
macos-10.15-amd64
4Install st...de.map
macos-10.15-amd64
4Analysis
- max time kernel
363s - max time network
514s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
08/05/2026, 01:05
Static task
static1
Behavioral task
behavioral1
Sample
stagewise-prerelease-1.0.0-alpha086-arm64.dmg
Resource
macos-20250619-en
Behavioral task
behavioral2
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/MacOS/stagewise-prerelease
Resource
macos-20250619-en
Behavioral task
behavioral3
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@img/colour/color.js
Resource
macos-20250619-en
Behavioral task
behavioral4
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@img.js
Resource
macos-20250619-en
Behavioral task
behavioral5
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@img.dylib
Resource
macos-20250619-en
Behavioral task
behavioral6
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/@vsc.js
Resource
macos-20250619-en
Behavioral task
behavioral7
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.ps1
Resource
macos-20250619-en
Behavioral task
behavioral8
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.ps1
Resource
macos-20250619-en
Behavioral task
behavioral9
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat
Resource
macos-20250619-en
Behavioral task
behavioral10
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.py
Resource
macos-20250619-en
Behavioral task
behavioral11
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.py
Resource
macos-20250619-en
Behavioral task
behavioral12
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.js
Resource
macos-20250619-en
Behavioral task
behavioral13
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.js
Resource
macos-20250619-en
Behavioral task
behavioral14
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.js
Resource
macos-20250619-en
Behavioral task
behavioral15
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat
Resource
macos-20250619-en
Behavioral task
behavioral16
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat
Resource
macos-20250619-en
Behavioral task
behavioral17
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.js
Resource
macos-20250619-en
Behavioral task
behavioral18
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/deps/winpty/vcbuild.bat
Resource
macos-20250619-en
Behavioral task
behavioral19
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.js
Resource
macos-20250619-en
Behavioral task
behavioral20
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/lib/eventEmitter2.js
Resource
macos-20250619-en
Behavioral task
behavioral21
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.js
Resource
macos-20250619-en
Behavioral task
behavioral22
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/lib/index.js
Resource
macos-20250619-en
Behavioral task
behavioral23
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/lib/interfaces.js
Resource
macos-20250619-en
Behavioral task
behavioral24
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/lib/shared/conout.js
Resource
macos-20250619-en
Behavioral task
behavioral25
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/lib/terminal.js
Resource
macos-20250619-en
Behavioral task
behavioral26
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node-pty/lib/terminal.test.js
Resource
macos-20250619-en
Behavioral task
behavioral27
Sample
Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.map
Resource
macos-20250619-en
General
- Target Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat
- Size 1KB
- Sample260508-bf2gdsfy2p
- SHA256 569581fbbad4e458b4c3e4759ed31586c2d252995e6bae06e104d48df22c5133
- MD5 c5def6f362cbf26a30e33dbbebb29755
- SHA1 2d77b39572009a145eb2259b10f098b147daf3d9
- SHA512 0bec43edf7f4414544077ec962a730fec4400cff35e76d131fc974e41d3d0603fd3643584cd69f4621acee399579d4ae206728bbc0af735152dc501f1b06855c
- TLSH T17A214936520A1FD3F2021FA5DF24B56AE73A862255ED512D301D814C7B27F8A3099E57
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Resource Forking 1 TTPs 3 IoCs
Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.
ioc Process sudo /bin/zsh -c "/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat" Process not Found /bin/zsh -c "/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat" Process not Found sh -c "sudo /bin/zsh -c \"/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat\"" Process not Found
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat\""1⤵PID:507
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat\""1⤵PID:507
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat"1⤵PID:507
-
/bin/zsh/bin/zsh -c "/Users/run/Install stagewise/stagewise (Pre-Release).app/Contents/Resources/app.asar.unpacked/node_modules/node.bat"2⤵PID:508
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:532
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:532
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:533
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:533