Analysis
- max time kernel
70s - max time network
139s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
22/07/2026, 12:18
Static task
static1
Behavioral task
behavioral1
Sample
Lumanotch.dmg
Resource
macos-20250619-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Lumanotch/Lumanotch.scpt
Resource
macos-20250619-en
0 signatures
150 seconds
General
- Target Lumanotch/Lumanotch.scpt
- Size 138KB
- Sample260722-pgwt7avaqg
- SHA256 de815a907a87a167d41cd96baa1ed864d50946512268fddaf61109a2c3496f75
- MD5 0b3c73216c36a77f589146f4cd39f4c9
- SHA1 1a379ab8037c5887a1a4781223e5528505cafd76
- SHA512 8b2f1bf2d6f6cc4f20ca7083df8d72856e3152a0f92f065df47b8d1481006255323319efc11f043263b6c0a30eba525a5f6a243b1c34a18a23306bf9fecfd311
- SSDEEP 3072:m2knkyl1NIy7AuY0+HCVKSgEdTgqGVi62cMNalnowazjJ0G44jXSF1UYrss5qK8m:m2kkyyOAuY0+HtSgEd0qGVf2cMNalnoY
- TLSH T186D3012CD7A84515B9B38654E66A1801B62E7F1E672FCCCC00D9C1CC47BA64E689DF2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"osascript /Users/run/Lumanotch/Lumanotch.scpt\""1⤵PID:458
-
/bin/bashsh -c "sudo /bin/zsh -c \"osascript /Users/run/Lumanotch/Lumanotch.scpt\""1⤵PID:458
-
/usr/bin/sudosudo /bin/zsh -c "osascript /Users/run/Lumanotch/Lumanotch.scpt"1⤵PID:458
-
/bin/zsh/bin/zsh -c "osascript /Users/run/Lumanotch/Lumanotch.scpt"2⤵PID:460
-
-
/usr/bin/osascriptosascript /Users/run/Lumanotch/Lumanotch.scpt2⤵PID:460
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:494
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:494
-
/usr/libexec/xpcproxyxpcproxy com.apple.StreamingUnzipService 1951⤵PID:496
-
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService1⤵PID:496