Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
1Static
static
1a665cd40ef...36.zip
macos-10.15-amd64
1Payload/XA...2x.png
macos-10.15-amd64
1Payload/XA...lt.png
macos-10.15-amd64
1Payload/XA...2x.png
macos-10.15-amd64
1Payload/XA....plist
macos-10.15-amd64
1Payload/XA...kgInfo
macos-10.15-amd64
1Payload/XA....plist
macos-10.15-amd64
1Payload/XA...gs.png
macos-10.15-amd64
1Payload/XA...XAgent
macos-10.15-amd64
1Payload/XA....xcent
macos-10.15-amd64
1Payload/XA...es.xml
macos-10.15-amd64
1Payload/XA...trings
macos-10.15-amd64
1Payload/XA...-3.nib
macos-10.15-amd64
1Payload/XA....plist
macos-10.15-amd64
1Payload/XA...-2.nib
macos-10.15-amd64
1Analysis
-
max time kernel
146s -
max time network
151s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
17/03/2023, 11:45
Static task
static1
Behavioral task
behavioral1
Sample
a665cd40efaca89e9257d083328e13446428281d133895f984e847d93634e736.zip
Resource
macos-20220504-en
Behavioral task
behavioral3
Sample
Payload/XAgent.app/Default.png
Resource
macos-20220504-en
Behavioral task
behavioral5
Sample
Payload/XAgent.app/Info.plist
Resource
macos-20220504-en
Behavioral task
behavioral6
Sample
Payload/XAgent.app/PkgInfo
Resource
macos-20220504-en
Behavioral task
behavioral7
Sample
Payload/XAgent.app/ResourceRules.plist
Resource
macos-20220504-en
Behavioral task
behavioral8
Sample
Payload/XAgent.app/Settings.png
Resource
macos-20220504-en
Behavioral task
behavioral9
Sample
Payload/XAgent.app/XAgent
Resource
macos-20220504-en
Behavioral task
behavioral10
Sample
Payload/XAgent.app/XAgent.xcent
Resource
macos-20220504-en
Behavioral task
behavioral11
Sample
Payload/XAgent.app/_CodeSignature/CodeResources.xml
Resource
macos-20220504-en
Behavioral task
behavioral12
Sample
Payload/XAgent.app/en.lproj/InfoPlist.strings
Resource
macos-20220504-en
Behavioral task
behavioral13
Sample
Payload/XAgent.app/en.lproj/MainStoryboard.storyboardc/2-view-3.nib
Resource
macos-20220504-en
Behavioral task
behavioral14
Sample
Payload/XAgent.app/en.lproj/MainStoryboard.storyboardc/Info.plist
Resource
macos-20220504-en
Behavioral task
behavioral15
Sample
Payload/XAgent.app/en.lproj/MainStoryboard.storyboardc/UIViewController-2.nib
Resource
macos-20220504-en
General
-
Target
Payload/XAgent.app/[email protected]
-
Size
6KB
-
MD5
eb53170000f55cfd4c20437d62cad812
-
SHA1
0fc4934b79870efdb26ba1ca0af3fa8ebabc7a28
-
SHA256
a8235e2e1f67ef95f6f26fd303ea3108c898e37dea84809b38f257b5e75e6915
-
SHA512
b2854ed6f5093137b978a6c93524386d5c3ed788ebfd60869f044d74508ad92d1611652dd3a479eeb4ba10ca3215fddb5c24c542eaa39cd1870abf463915fc9b
-
SSDEEP
96:VuRIiQcBhkKXM8hFqGZkIdMOSjuG/pJlT:sHVi+kOSjuG/BT
Malware Config
Signatures
Processes
-
/bin/shPID:505
-
/bin/bashPID:505
-
/bin/bashPID:505
-
/usr/bin/sudoPID:505
-
/usr/bin/sudoPID:505
-
/bin/zshPID:514
-
-
/bin/zshPID:514
-
-
/Users/run/Payload/XAgent.app/[email protected]PID:514
-
-
/Users/run/Payload/XAgent.app/[email protected]PID:514
-