Overview
overview
3Static
static
1bk_client-linux-arm64
ubuntu-18.04-amd64
bk_client-linux-arm64
debian-9-armhf
bk_client-linux-arm64
debian-9-mips
bk_client-linux-arm64
debian-9-mipsel
bk_client-...x86_64
ubuntu-18.04-amd64
1bk_client-macos-arm64
macos-10.15-amd64
1bk_client-...x86_64
macos-10.15-amd64
1bk_client-...64.exe
windows10-2004-x64
bk_client-...64.exe
windows11-ltsc_2024-x64
bk_client-...64.exe
windows10-2004-x64
3bk_client-...64.exe
windows10-2004-x64
3bk_client-...64.exe
windows11-ltsc_2024-x64
3tools/bk_m...t__.py
windows10-2004-x64
3tools/bk_m...t__.py
windows11-ltsc_2024-x64
3tools/bk_m...ter.py
ubuntu-18.04-amd64
3tools/bk_m...ter.py
debian-9-armhf
3tools/bk_m...ter.py
debian-9-mips
3tools/bk_m...ter.py
debian-9-mipsel
3tools/bk_m...ore.py
ubuntu-18.04-amd64
3tools/bk_m...ore.py
debian-9-armhf
3tools/bk_m...ore.py
debian-9-mips
3tools/bk_m...ore.py
debian-9-mipsel
3tools/bk_m...t__.py
windows10-2004-x64
3tools/bk_m...t__.py
windows11-ltsc_2024-x64
3tools/bk_m...ase.py
windows10-2004-x64
3tools/bk_m...ase.py
windows11-ltsc_2024-x64
3tools/bk_m...ile.py
windows10-2004-x64
3tools/bk_m...ile.py
windows11-ltsc_2024-x64
3tools/bk_m...aph.py
windows10-2004-x64
3tools/bk_m...aph.py
windows11-ltsc_2024-x64
3tools/bk_m...sal.py
windows10-2004-x64
3tools/bk_m...sal.py
windows11-ltsc_2024-x64
3Analysis
- max time kernel
76s - max time network
152s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
13/11/2026, 15:52
Static task
static1
Behavioral task
behavioral1
Sample
bk_client-linux-arm64
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral2
Sample
bk_client-linux-arm64
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
bk_client-linux-arm64
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
bk_client-linux-arm64
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
bk_client-linux-x86_64
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral6
Sample
bk_client-macos-arm64
Resource
macos-20260915-en
Behavioral task
behavioral7
Sample
bk_client-macos-x86_64
Resource
macos-20260915-en
Behavioral task
behavioral8
Sample
bk_client-windows-arm64.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral9
Sample
bk_client-windows-arm64.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral10
Sample
bk_client-windows-x86_64.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral11
Sample
bk_client-windows7-x86_64.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
bk_client-windows7-x86_64.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
tools/bk_mtlx/__init__.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
tools/bk_mtlx/__init__.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
tools/bk_mtlx/blender_materialx_exporter.py
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral16
Sample
tools/bk_mtlx/blender_materialx_exporter.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral17
Sample
tools/bk_mtlx/blender_materialx_exporter.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral18
Sample
tools/bk_mtlx/blender_materialx_exporter.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral19
Sample
tools/bk_mtlx/materialx_library_core.py
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral20
Sample
tools/bk_mtlx/materialx_library_core.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral21
Sample
tools/bk_mtlx/materialx_library_core.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral22
Sample
tools/bk_mtlx/materialx_library_core.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral23
Sample
tools/bk_mtlx/mtlxutils/__init__.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
tools/bk_mtlx/mtlxutils/__init__.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
tools/bk_mtlx/mtlxutils/mxbase.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
tools/bk_mtlx/mtlxutils/mxbase.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
tools/bk_mtlx/mtlxutils/mxfile.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
tools/bk_mtlx/mtlxutils/mxfile.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
tools/bk_mtlx/mtlxutils/mxnodegraph.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
tools/bk_mtlx/mtlxutils/mxnodegraph.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
tools/bk_mtlx/mtlxutils/mxtraversal.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
tools/bk_mtlx/mtlxutils/mxtraversal.py
Resource
win11ltsc2024-20260911-en
General
- Target bk_client-macos-x86_64
- Size 8.9MB
- Sample261113-tbe2psds71
- SHA256 dce065a481847d2605297ea4b4e9e9628de7ab54dd1bd4e3938323b61444c6c0
- MD5 caa9f2c9ac301b2f66e1de25132cd762
- SHA1 b664ac5c0f631efc0baf72534035aae9f8746784
- SHA512 27aa5dd328b079a5b311ee7eb346878f2cd42d3a4bab80db00fe3cc899ad0d7eba4744b21d347aa98036b8e0321194f814a3671ef52b7d769100d912b5368b4d
- SSDEEP 98304:UKCrndulukUQcLbbY3HrYR0AdVtzhJ0J26ImnShx2rfTezGHQBtM8B4gOHdEPi1r:d8I8QYYbMhzhD
- TLSH T115964B17ECA514F9C1AED13485A29153BA727C4A4B3023D33B9CF6342F36BD06AB9B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/bk_client-macos-x86_64\""1⤵PID:492
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/bk_client-macos-x86_64\""1⤵PID:492
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/bk_client-macos-x86_641⤵PID:492
-
/bin/zsh/bin/zsh -c /Users/run/bk_client-macos-x86_642⤵PID:493
-
-
/Users/run/bk_client-macos-x86_64/Users/run/bk_client-macos-x86_642⤵PID:493
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:494
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:494
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.systemsoundserverd1⤵PID:495
-
/usr/sbin/systemsoundserverd/usr/sbin/systemsoundserverd1⤵PID:495
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:496
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:496
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:513
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:513