Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

08/11/2021, 08:45 UTC

211108-knqjjabfa3 1

08/11/2021, 08:40 UTC

211108-kk3dxsbeh8 1

Analysis

  • max time network
    149s
  • platform
    macos_amd64
  • resource
    macos
  • submitted
    08/11/2021, 08:45 UTC

General

  • Target

    RecentNews.?fdp.app/Contents/Resources/lib/python2.7/config/libpython2.7.dylib

  • Size

    2.5MB

  • MD5

    fa05806e4a3b634fd621b1efbebd3a7c

  • SHA1

    d6130fd2d9097cec00d3c80fd8ceede5a2a5eb00

  • SHA256

    6b0388aa64f1e31d86603309609fe295f650e66d518242375c483e1cf402d0b2

  • SHA512

    f610016e45a52e41418fef0be85c4b54b20b17460ed434b41b17f7ebf482d1c286afb1df0f035154f13f5fa8ad21bdbaa22578a9ddb9b99642344410dc6bbf19

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /Users/run/RecentNews.?fdp.app/Contents/Resources/lib/python2.7/config/libpython2.7."
    1⤵
      PID:491
    • /bin/bash
      sh -c "sudo /Users/run/RecentNews.?fdp.app/Contents/Resources/lib/python2.7/config/libpython2.7."
      1⤵
        PID:491
      • /usr/bin/sudo
        sudo "/Users/run/RecentNews.?fdp.app/Contents/Resources/lib/python2.7/config/libpython2.7."
        1⤵
          PID:491

        Network

        • flag-us
          DNS
          javadl-esd-secure.oracle.com
          Remote address:
          8.8.8.8:53
          Request
          javadl-esd-secure.oracle.com
          IN A
          Response
          javadl-esd-secure.oracle.com
          IN CNAME
          javadl-esd-secure.oracle.com.edgekey.net
          javadl-esd-secure.oracle.com.edgekey.net
          IN CNAME
          e13073.g.akamaiedge.net
          e13073.g.akamaiedge.net
          IN A
          184.29.202.68
        • flag-us
          DNS
          itunes.apple.com
          Remote address:
          8.8.8.8:53
          Request
          itunes.apple.com
          IN A
          Response
          itunes.apple.com
          IN CNAME
          itunes-cdn.itunes-apple.com.akadns.net
          itunes-cdn.itunes-apple.com.akadns.net
          IN CNAME
          itunes.apple.com.edgekey.net
          itunes.apple.com.edgekey.net
          IN CNAME
          e673.dsce9.akamaiedge.net
          e673.dsce9.akamaiedge.net
          IN A
          23.208.76.118
        • flag-us
          DNS
          lb._dns-sd._udp.0.0.0.10.in-addr.arpa
          Remote address:
          8.8.8.8:53
          Request
          lb._dns-sd._udp.0.0.0.10.in-addr.arpa
          IN PTR
          Response
        • 17.253.105.202:443
          40 B
          1.5kB
          1
          1
        • 17.57.146.169:5223
          tls
          460 B
          5
        • 184.29.202.68:443
          javadl-esd-secure.oracle.com
          tls
          2.2kB
          18.2kB
          24
          25
        • 184.29.202.68:443
          javadl-esd-secure.oracle.com
          tls
          1.8kB
          13.0kB
          16
          18
        • 23.208.76.118:443
          itunes.apple.com
          tls
          2.5kB
          14.2kB
          25
          27
        • 8.8.8.8:53
          javadl-esd-secure.oracle.com
          dns
          74 B
          178 B
          1
          1

          DNS Request

          javadl-esd-secure.oracle.com

          DNS Response

          184.29.202.68

        • 8.8.8.8:53
          itunes.apple.com
          dns
          62 B
          205 B
          1
          1

          DNS Request

          itunes.apple.com

          DNS Response

          23.208.76.118

        • 8.8.8.8:53
          lb._dns-sd._udp.0.0.0.10.in-addr.arpa
          dns
          83 B
          83 B
          1
          1

          DNS Request

          lb._dns-sd._udp.0.0.0.10.in-addr.arpa

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        We care about your privacy.

        This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.