Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

a665cd40ef...36.zip

macos-10.15-amd64

1

Payload/XA...2x.png

macos-10.15-amd64

1

Payload/XA...lt.png

macos-10.15-amd64

1

Payload/XA...2x.png

macos-10.15-amd64

1

Payload/XA....plist

macos-10.15-amd64

1

Payload/XA...kgInfo

macos-10.15-amd64

1

Payload/XA....plist

macos-10.15-amd64

1

Payload/XA...gs.png

macos-10.15-amd64

1

Payload/XA...XAgent

macos-10.15-amd64

1

Payload/XA....xcent

macos-10.15-amd64

1

Payload/XA...es.xml

macos-10.15-amd64

1

Payload/XA...trings

macos-10.15-amd64

1

Payload/XA...-3.nib

macos-10.15-amd64

1

Payload/XA....plist

macos-10.15-amd64

1

Payload/XA...-2.nib

macos-10.15-amd64

1

Analysis

  • max time kernel
    133s
  • max time network
    143s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    17/03/2023, 11:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Payload/XAgent.app/PkgInfo

  • Size

    8B

  • MD5

    23b7d7d024abb0f558420e098800bf27

  • SHA1

    9f9eea0cfe2d65f2c3d6b092e375b40782d08f31

  • SHA256

    82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0

  • SHA512

    f77d501528dd0ced155c80406cfbee38d5d3649b64d2a9324f3d6cee39491eb8f54cdebae49c6e21a20d2309d8fae1b01c41631224811e73483db25a2695738c

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/PkgInfo\""
    1⤵
      PID:499
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/PkgInfo\""
      1⤵
        PID:499
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/PkgInfo\""
        1⤵
          PID:499
        • /usr/bin/sudo
          sudo /bin/zsh -c /Users/run/Payload/XAgent.app/PkgInfo
          1⤵
            PID:499
          • /usr/bin/sudo
            sudo /bin/zsh -c /Users/run/Payload/XAgent.app/PkgInfo
            1⤵
              PID:499
              • /bin/zsh
                /bin/zsh -c /Users/run/Payload/XAgent.app/PkgInfo
                2⤵
                  PID:514
                • /bin/zsh
                  /bin/zsh -c /Users/run/Payload/XAgent.app/PkgInfo
                  2⤵
                    PID:514
                  • /Users/run/Payload/XAgent.app/PkgInfo
                    /Users/run/Payload/XAgent.app/PkgInfo
                    2⤵
                      PID:514
                    • /Users/run/Payload/XAgent.app/PkgInfo
                      /Users/run/Payload/XAgent.app/PkgInfo
                      2⤵
                        PID:514
                      • /bin/sh
                        sh /Users/run/Payload/XAgent.app/PkgInfo
                        2⤵
                          PID:514
                        • /bin/sh
                          sh /Users/run/Payload/XAgent.app/PkgInfo
                          2⤵
                            PID:514
                          • /bin/bash
                            sh /Users/run/Payload/XAgent.app/PkgInfo
                            2⤵
                              PID:514
                            • /bin/bash
                              sh /Users/run/Payload/XAgent.app/PkgInfo
                              2⤵
                                PID:514

                            Network

                            MITRE ATT&CK Matrix

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads