Analysis

  • user interaction
    yes
  • max time kernel
    101s
  • max time network
    151s
  • platform
    macos-10.15_amd64
  • resource
    macos-20250619-en
  • resource tags

    arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    07/09/2026, 17:52

General

  • Target
    SKlauncher/SKlauncher.app/Contents/Java/SKlauncher.jar
  • Size 1.3MB
  • Sample260907-wf6fkasdja
  • SHA256 25a73e3770a1d8d14bce53e8920e2e893aacc3c715d0fb22f878ef2090d03863
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"open /Users/run/SKlauncher/SKlauncher.app/Contents/Java/SKlauncher.jar\""
    1⤵
      PID:471
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"open /Users/run/SKlauncher/SKlauncher.app/Contents/Java/SKlauncher.jar\""
      1⤵
        PID:471
      • /usr/bin/sudo
        sudo /bin/zsh -c "open /Users/run/SKlauncher/SKlauncher.app/Contents/Java/SKlauncher.jar"
        1⤵
          PID:471
          • /bin/zsh
            /bin/zsh -c "open /Users/run/SKlauncher/SKlauncher.app/Contents/Java/SKlauncher.jar"
            2⤵
              PID:472
            • /usr/bin/open
              open /Users/run/SKlauncher/SKlauncher.app/Contents/Java/SKlauncher.jar
              2⤵
                PID:472
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.JarLauncher.1532
              1⤵
                PID:473
              • /System/Library/CoreServices/Jar Launcher.app/Contents/MacOS/Jar Launcher
                "/System/Library/CoreServices/Jar Launcher.app/Contents/MacOS/Jar Launcher"
                1⤵
                  PID:473
                  • /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java
                    "/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java" -jar /Users/run/SKlauncher/SKlauncher.app/Contents/Java/SKlauncher.jar
                    2⤵
                      PID:475
                  • /usr/libexec/xpcproxy
                    xpcproxy com.apple.metadata.mdwrite
                    1⤵
                      PID:474
                    • /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/jspawnhelper
                      43:46
                      1⤵
                        PID:500
                      • /usr/bin/defaults
                        defaults read -g AppleInterfaceStyle
                        1⤵
                          PID:500
                        • /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/jspawnhelper
                          44:47
                          1⤵
                            PID:502
                          • /bin/uname
                            /bin/uname -m
                            1⤵
                              PID:502
                            • /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/jspawnhelper
                              44:47
                              1⤵
                                PID:503
                              • /usr/sbin/sysctl
                                /usr/sbin/sysctl -n sysctl.proc_translated
                                1⤵
                                  PID:503

                                Network

                                      MITRE ATT&CK Matrix

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      launcher_profiles.json.tmp.1788828800472

                                      • Path /Users/run/Library/Application Support/minecraft/launcher_profiles.json.tmp.1788828800472
                                      • Size 530B
                                      • SHA256 0cde36777dcdd7a65e31559a4b5a4977658f08c2e78451f117e5e4a8241e6f71
                                      • MD5 SHA1 SHA512 TLSH

                                      sklauncher-fx.jar

                                      • Path /Users/run/Library/Application Support/minecraft/sklauncher-fx.jar
                                      • Size 16.4MB
                                      • SHA256 c6b0f9be0176c14bd224475c7c36903feda68e2cdedc9404a03181790caee404
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      sklauncher-fx.jar.xz

                                      • Path /Users/run/Library/Application Support/minecraft/sklauncher/sklauncher-fx.jar.xz
                                      • Size 15.2MB
                                      • SHA256 11f5c22c01034e424a6f3c6bdd43d9d3556ccb01f208ad2773f5588139f25359
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      sklauncher.vmoptions

                                      • Path /Users/run/Library/Application Support/minecraft/sklauncher/sklauncher.vmoptions
                                      • Size 104B
                                      • SHA256 4dba22e5f8956126ce62557221dd2b4d969fea7ec5bf0bae7e1f0c7e89c14af7
                                      • MD5 SHA1 SHA512 TLSH

                                      libflatlaf-macos-x86_64-2884121495400.dylib

                                      • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/libflatlaf-macos-x86_64-2884121495400.dylib
                                      • Size 73KB
                                      • SHA256 7ea8a0e6a2a3ba3415c1c12c8fd58e07bf05c3bf638b16d23993b654a80fedce
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      +JXF1472849601259097652.tmp

                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/+JXF1472849601259097652.tmp
                                      • Size 393KB
                                      • SHA256 4c392dcc8ad916f0f9df7559ab5563b01dd94f9f3b2db34617fe392e00060339
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      +JXF1666105145445381540.tmp

                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/+JXF1666105145445381540.tmp
                                      • Size 401KB
                                      • SHA256 1bda81124d6ae26ed16a7201e2bd93766af5a3b14faf79eea14d191ebbd41146
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      +JXF5298466232040011794.tmp

                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/+JXF5298466232040011794.tmp
                                      • Size 404KB
                                      • SHA256 6bdebeb76083e187c7ae59420bfc24e851edb572e1a8d97c1c37b7b2dc26148c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      +JXF6090723349210149660.tmp

                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/+JXF6090723349210149660.tmp
                                      • Size 405KB
                                      • SHA256 0cb1bc1335372d9e3a0cf6f5311c7cce87af90d2a777fdeec18be605a2a70bc1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      +JXF7387178181460002064.tmp

                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/+JXF7387178181460002064.tmp
                                      • Size 398KB
                                      • SHA256 1936d24cb0f4ce7006e08c6ef4243d2e42a7b45f2249f8fe54d92f76a317dfd1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      +JXF8109442321371226100.tmp

                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/+JXF8109442321371226100.tmp
                                      • Size 397KB
                                      • SHA256 64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      SKL_TempStyleClass19802526550912865.css

                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/SKL_TempStyleClass19802526550912865.css
                                      • Size 264B
                                      • SHA256 203015cc925d561820d225a795e1c6a56e49ff12fe4c874709e717335aa0dc18
                                      • MD5 SHA1 SHA512 TLSH