Analysis
- max time kernel
66s - max time network
122s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
13/11/2026, 12:17
Static task
static1
Behavioral task
behavioral1
Sample
BaoCode-1.1.0-arm64.dmg
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target BaoCode-1.1.0-arm64.dmg
- Size 15.5MB
- Sample261113-pgdnlsvv6n
- SHA256 8edb2b2b9eab1d6b1094e9ffeb46e115451a7bbfc3e9514234e6c2ccdc16097d
- MD5 4aa6d015d8a75642a5059eeeec48985e
- SHA1 6a92aacc2e17334ffdcd32c0ea4696d175e33959
- SHA512 a0946c0f26148e3049d590300f8ae4fa5b3e5d5c069449c944bb094dd734447b83127bae9d441b36f6086a32bb2c5952b8b3cb13e16b9eef0cdccf6619a8d249
- SSDEEP 393216:5Fni7VaHSOfNqimFd2Ea2msQecq0iMzi0FqNkbIj8ixb:5EVatfjm72ElmsQpq0HzipJ
- TLSH T1B1F63377ECB18FDD89EC6717D80613A13FC41C079F3996E2D3E72489819428A16EE58E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"open /Volumes/BaoCode\\ 1.1.0/BaoCode.app\""1⤵PID:508
-
/bin/bashsh -c "sudo /bin/zsh -c \"open /Volumes/BaoCode\\ 1.1.0/BaoCode.app\""1⤵PID:508
-
/usr/bin/sudosudo /bin/zsh -c "open /Volumes/BaoCode\\ 1.1.0/BaoCode.app"1⤵PID:508
-
/bin/zsh/bin/zsh -c "open /Volumes/BaoCode\\ 1.1.0/BaoCode.app"2⤵PID:509
-
-
/usr/bin/openopen "/Volumes/BaoCode 1.1.0/BaoCode.app"2⤵PID:509
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:513
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:513