Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
1Static
static
RecentNews....h.vbs
macos_amd64
1RecentNews...ler.py
macos_amd64
1RecentNews...st.xml
macos_amd64
1RecentNews...taller
macos_amd64
1RecentNews...python
macos_amd64
1RecentNews...bsc/mt
macos_amd64
1RecentNews...er.pyc
macos_amd64
1RecentNews...ner.sh
macos_amd64
1RecentNews...le.pdf
macos_amd64
1RecentNews...t__.py
macos_amd64
1RecentNews...r__.sh
macos_amd64
1RecentNews...all-sh
macos_amd64
1RecentNews...n2.7.a
macos_amd64
1RecentNews....dylib
macos_amd64
1RecentNews...thon.o
macos_amd64
1RecentNews...te.pyc
macos_amd64
1RecentNews...te.pyc
macos_amd64
pkg_resources.pyc
macos_amd64
1Analysis
-
max time network
149s -
platform
macos_amd64 -
resource
macos -
submitted
08/11/2021, 08:45 UTC
Static task
static1
Behavioral task
behavioral1
Sample
RecentNews.?fdp.app/Contents/Resources/include/python2.7/descrobject.h.vbs
Resource
macos
Behavioral task
behavioral2
Sample
RecentNews.?fdp.app/Contents/Resources/installer.py
Resource
macos
Behavioral task
behavioral3
Sample
RecentNews.?fdp.app/Contents/Info.plist.xml
Resource
macos
Behavioral task
behavioral4
Sample
RecentNews.?fdp.app/Contents/MacOS/installer
Resource
macos
Behavioral task
behavioral5
Sample
RecentNews.?fdp.app/Contents/MacOS/python
Resource
macos
Behavioral task
behavioral6
Sample
RecentNews.?fdp.app/Contents/Resources/Libsc/mt
Resource
macos
Behavioral task
behavioral7
Sample
RecentNews.?fdp.app/Contents/Resources/Libsc/runner.pyc
Resource
macos
Behavioral task
behavioral8
Sample
RecentNews.?fdp.app/Contents/Resources/Libsc/runner.sh
Resource
macos
Behavioral task
behavioral9
Sample
RecentNews.?fdp.app/Contents/Resources/Out/file.pdf
Resource
macos
Behavioral task
behavioral10
Sample
RecentNews.?fdp.app/Contents/Resources/__boot__.py
Resource
macos
Behavioral task
behavioral11
Sample
RecentNews.?fdp.app/Contents/Resources/__error__.sh
Resource
macos
Behavioral task
behavioral12
Sample
RecentNews.?fdp.app/Contents/Resources/lib/python2.7/config/install-sh
Resource
macos
Behavioral task
behavioral13
Sample
RecentNews.?fdp.app/Contents/Resources/lib/python2.7/config/libpython2.7.a
Resource
macos
Behavioral task
behavioral14
Sample
RecentNews.?fdp.app/Contents/Resources/lib/python2.7/config/libpython2.7.dylib
Resource
macos
Behavioral task
behavioral15
Sample
RecentNews.?fdp.app/Contents/Resources/lib/python2.7/config/python.o
Resource
macos
Behavioral task
behavioral16
Sample
RecentNews.?fdp.app/Contents/Resources/lib/python2.7/site.pyc
Resource
macos
Behavioral task
behavioral17
Sample
RecentNews.?fdp.app/Contents/Resources/site.pyc
Resource
macos
Behavioral task
behavioral18
Sample
pkg_resources.pyc
Resource
macos
General
-
Target
RecentNews.?fdp.app/Contents/Resources/lib/python2.7/config/libpython2.7.dylib
-
Size
2.5MB
-
MD5
fa05806e4a3b634fd621b1efbebd3a7c
-
SHA1
d6130fd2d9097cec00d3c80fd8ceede5a2a5eb00
-
SHA256
6b0388aa64f1e31d86603309609fe295f650e66d518242375c483e1cf402d0b2
-
SHA512
f610016e45a52e41418fef0be85c4b54b20b17460ed434b41b17f7ebf482d1c286afb1df0f035154f13f5fa8ad21bdbaa22578a9ddb9b99642344410dc6bbf19
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /Users/run/RecentNews.?fdp.app/Contents/Resources/lib/python2.7/config/libpython2.7."1⤵PID:491
-
/bin/bashsh -c "sudo /Users/run/RecentNews.?fdp.app/Contents/Resources/lib/python2.7/config/libpython2.7."1⤵PID:491
-
/usr/bin/sudosudo "/Users/run/RecentNews.?fdp.app/Contents/Resources/lib/python2.7/config/libpython2.7."1⤵PID:491
Network
-
Remote address:8.8.8.8:53Requestjavadl-esd-secure.oracle.comIN AResponsejavadl-esd-secure.oracle.comIN CNAMEjavadl-esd-secure.oracle.com.edgekey.netjavadl-esd-secure.oracle.com.edgekey.netIN CNAMEe13073.g.akamaiedge.nete13073.g.akamaiedge.netIN A184.29.202.68
-
Remote address:8.8.8.8:53Requestitunes.apple.comIN AResponseitunes.apple.comIN CNAMEitunes-cdn.itunes-apple.com.akadns.netitunes-cdn.itunes-apple.com.akadns.netIN CNAMEitunes.apple.com.edgekey.netitunes.apple.com.edgekey.netIN CNAMEe673.dsce9.akamaiedge.nete673.dsce9.akamaiedge.netIN A23.208.76.118
-
Remote address:8.8.8.8:53Requestlb._dns-sd._udp.0.0.0.10.in-addr.arpaIN PTRResponse
-
40 B 1.5kB 1 1
-
460 B 5
-
2.2kB 18.2kB 24 25
-
1.8kB 13.0kB 16 18
-
2.5kB 14.2kB 25 27
-
74 B 178 B 1 1
DNS Request
javadl-esd-secure.oracle.com
DNS Response
184.29.202.68
-
62 B 205 B 1 1
DNS Request
itunes.apple.com
DNS Response
23.208.76.118
-
83 B 83 B 1 1
DNS Request
lb._dns-sd._udp.0.0.0.10.in-addr.arpa