Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    130s
  • max time network
    150s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    19/04/2023, 05:35

General

  • Target

    email-html-1.html

  • Size

    64KB

  • MD5

    de2543912e733d80edcb4288476a819f

  • SHA1

    7a047b8832ea12f7e6961c8a8b5a1f3d47cf217e

  • SHA256

    87f0b15ef62d1ddb4f0bc31b7546341bf634c29e4da485f140187814ddc62256

  • SHA512

    4d12bcce29a0946dd95a165bde530481d0e54edb5ffb585bd843244652d3522a701d5e999677a61d86656ed5f2c24094cf6318ee4891159a591ef80788d57a73

  • SSDEEP

    1536:s/q2atw9WHu9+1YUNxMHHXgX8wSwCwIFykukIsKwq:s/q2aq82Ht4nkq

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/email-html-1.html\""
    1⤵
      PID:510
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/email-html-1.html\""
      1⤵
        PID:510
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/email-html-1.html\""
        1⤵
          PID:510
        • /usr/bin/sudo
          sudo /bin/zsh -c /Users/run/email-html-1.html
          1⤵
            PID:510
          • /usr/bin/sudo
            sudo /bin/zsh -c /Users/run/email-html-1.html
            1⤵
              PID:510
              • /bin/zsh
                /bin/zsh -c /Users/run/email-html-1.html
                2⤵
                  PID:515
                • /bin/zsh
                  /bin/zsh -c /Users/run/email-html-1.html
                  2⤵
                    PID:515
                  • /Users/run/email-html-1.html
                    /Users/run/email-html-1.html
                    2⤵
                      PID:515
                    • /Users/run/email-html-1.html
                      /Users/run/email-html-1.html
                      2⤵
                        PID:515
                      • /bin/sh
                        sh /Users/run/email-html-1.html
                        2⤵
                          PID:515
                        • /bin/sh
                          sh /Users/run/email-html-1.html
                          2⤵
                            PID:515
                          • /bin/bash
                            sh /Users/run/email-html-1.html
                            2⤵
                              PID:515
                            • /bin/bash
                              sh /Users/run/email-html-1.html
                              2⤵
                                PID:515

                            Network

                            MITRE ATT&CK Matrix

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads