Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
128s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
11/01/2023, 21:39
Static task
static1
Behavioral task
behavioral1
Sample
Data/532204087_1355x1355-small-230.jpg
Resource
macos-20220504-en
Behavioral task
behavioral2
Sample
Data/532205080_1647x1098-small-234.jpg
Resource
macos-20220504-en
Behavioral task
behavioral3
Sample
Data/532241774_2880x1920-small-223.jpg
Resource
macos-20220504-en
Behavioral task
behavioral4
Sample
Data/IMG_0556-353.jpg
Resource
macos-20220504-en
Behavioral task
behavioral5
Sample
Data/IMG_0556-small-354.jpg
Resource
macos-20220504-en
Behavioral task
behavioral6
Sample
Metadata/BuildVersionHistory.xml
Resource
macos-20220504-en
General
-
Target
Data/IMG_0556-small-354.jpg
-
Size
18KB
-
MD5
14b206e491e802b9e770aee17c228fc7
-
SHA1
865d4547899f467b877e9236ec00aa3d0efaf7db
-
SHA256
ade13bba59b3eb12a9de5dfb911a684568b5f2e66f89571e8794c9bcf7ee005a
-
SHA512
d8cb5ea8a3de1c60d0701b00f3a6b0ca0a3eda472264c7a4fc58d7a1670436ce0b421fe910ec752225c12d038c7f619c845da2cabe4ed7cb4820da7741ced03c
-
SSDEEP
384:NnfaWkCzm+HLTo1dhXdujyOrEPCWREGXNp4AXNRRADFPm:haFCzLLTooySEPJR/fJ91
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Data/IMG_0556-small-354.jpg\""1⤵PID:492
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Data/IMG_0556-small-354.jpg\""1⤵PID:492
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Data/IMG_0556-small-354.jpg\""1⤵PID:492
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Data/IMG_0556-small-354.jpg1⤵PID:492
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Data/IMG_0556-small-354.jpg1⤵PID:492
-
/bin/zsh/bin/zsh -c /Users/run/Data/IMG_0556-small-354.jpg2⤵PID:504
-
-
/bin/zsh/bin/zsh -c /Users/run/Data/IMG_0556-small-354.jpg2⤵PID:504
-
-
/Users/run/Data/IMG_0556-small-354.jpg/Users/run/Data/IMG_0556-small-354.jpg2⤵PID:504
-
-
/Users/run/Data/IMG_0556-small-354.jpg/Users/run/Data/IMG_0556-small-354.jpg2⤵PID:504
-