Analysis
- max time kernel
105s - max time network
121s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
10/08/2026, 17:10
Static task
static1
Behavioral task
behavioral1
Sample
Batchy-1.0.2.dmg
Resource
macos-20250619-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Batchy 1.0.2/Batchy.app/Contents/MacOS/Batchy
Resource
macos-20250619-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Batchy 1.0.2/Batchy.app/Contents/Resources/lame
Resource
macos-20250619-en
1 signatures
150 seconds
General
- Target Batchy-1.0.2.dmg
- Size 46.3MB
- Sample260810-vpzhyateke
- SHA256 1b3e8eee3c6aa8970125236b228be3cf6604a4206017b7d60b703f8c5fab98bf
- MD5 05b68fcfd28f04891270c9f9e9813be0
- SHA1 e934a8394abf306ab5e75eb466b68905d71f4f35
- SHA512 40b917a88a566522ec471c978fb1bad57636568fe0ef84c6dc0a3afb91ad74a05af156e6ff33813fbb7a43e66961787f0605a3b1262bf2ddb736065e16a21300
- SSDEEP 786432:ewWsZE5NZbCXMX+q7m+zZ5dRGhTCj8QpA9syIyf1OObxGcVkxjrc3s368huHlYy:eJsa5bm7qjeO8Qpjq1xxGcUnwsThuFvk
- TLSH T1DAB723E8FB75FCD05117880963CAAE7AEA1BD9C63F76ADB10127402109E3D367844E5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"open /Volumes/Batchy\\ 1.0.2/Batchy.app\""1⤵PID:519
-
/bin/bashsh -c "sudo /bin/zsh -c \"open /Volumes/Batchy\\ 1.0.2/Batchy.app\""1⤵PID:519
-
/usr/bin/sudosudo /bin/zsh -c "open /Volumes/Batchy\\ 1.0.2/Batchy.app"1⤵PID:519
-
/bin/zsh/bin/zsh -c "open /Volumes/Batchy\\ 1.0.2/Batchy.app"2⤵PID:520
-
-
/usr/bin/openopen "/Volumes/Batchy 1.0.2/Batchy.app"2⤵PID:520
-
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:526
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:527
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:529
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:529