Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
130s -
max time network
151s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
11/01/2023, 21:39
Static task
static1
Behavioral task
behavioral1
Sample
Data/532204087_1355x1355-small-230.jpg
Resource
macos-20220504-en
Behavioral task
behavioral2
Sample
Data/532205080_1647x1098-small-234.jpg
Resource
macos-20220504-en
Behavioral task
behavioral3
Sample
Data/532241774_2880x1920-small-223.jpg
Resource
macos-20220504-en
Behavioral task
behavioral4
Sample
Data/IMG_0556-353.jpg
Resource
macos-20220504-en
Behavioral task
behavioral5
Sample
Data/IMG_0556-small-354.jpg
Resource
macos-20220504-en
Behavioral task
behavioral6
Sample
Metadata/BuildVersionHistory.xml
Resource
macos-20220504-en
General
-
Target
Metadata/BuildVersionHistory.xml
-
Size
266B
-
MD5
b578b14f26e80b19d3b9d4872e25de59
-
SHA1
027c41a20e5782bd9f9d93a0c8ea94b0c1233321
-
SHA256
0efc90aff124f3772056925ca652645b3ac69d60461b34651c8f3c78c49a61b7
-
SHA512
dc572e21a5b4b8e10fc12846bb1e12ad2abb7492f96e510c7488c4972e5e96d16aa4f9a9cdc3a62fff519927f6a5d05c698a3329ee3f93a0d0ccfb2d899efba8
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Metadata/BuildVersionHistory.xml\""1⤵PID:497
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Metadata/BuildVersionHistory.xml\""1⤵PID:497
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Metadata/BuildVersionHistory.xml\""1⤵PID:497
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Metadata/BuildVersionHistory.xml1⤵PID:497
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Metadata/BuildVersionHistory.xml1⤵PID:497
-
/bin/zsh/bin/zsh -c /Users/run/Metadata/BuildVersionHistory.xml2⤵PID:512
-
-
/bin/zsh/bin/zsh -c /Users/run/Metadata/BuildVersionHistory.xml2⤵PID:512
-
-
/Users/run/Metadata/BuildVersionHistory.xml/Users/run/Metadata/BuildVersionHistory.xml2⤵PID:512
-
-
/Users/run/Metadata/BuildVersionHistory.xml/Users/run/Metadata/BuildVersionHistory.xml2⤵PID:512
-
-
/bin/shsh /Users/run/Metadata/BuildVersionHistory.xml2⤵PID:512
-
-
/bin/shsh /Users/run/Metadata/BuildVersionHistory.xml2⤵PID:512
-
-
/bin/bashsh /Users/run/Metadata/BuildVersionHistory.xml2⤵PID:512
-
-
/bin/bashsh /Users/run/Metadata/BuildVersionHistory.xml2⤵PID:512
-