Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

08/05/2023, 05:39

230508-gcrqnsba2v 3

08/05/2023, 05:39

230508-gcdh2shb45 1

Analysis

  • max time kernel
    137s
  • max time network
    142s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    08/05/2023, 05:39

General

  • Target

    IMG-20230503-WA0006.jpg

  • Size

    36KB

  • MD5

    8fd8c3bc34bd896761d3e2a7e2f65878

  • SHA1

    a07ea97ede22c173f168e9b731ce364a75832b9b

  • SHA256

    3baa226d4c81b18ce958213e3ac794efc946d67ceaa9ee9801bf28a5d1f606aa

  • SHA512

    99cca6c8975d00f8e0f992b254547017b42d9795014c044884378dacefda772d939deb6cf550cf5e66cc17b72110c1fc666e79569b10b63fb6776fe8856403c7

  • SSDEEP

    768:/8IqlFeq6AWVC+l6vIbiXy5f6np6YJW10HUO5+1uUhgZSHc8HVpzj:/87+JeCyp6YJFZ+1uXZSHH1pP

Score
1/10

Malware Config

Signatures

Processes

  • /usr/sbin/spctl
    /usr/sbin/spctl --test-devid-status
    1⤵
      PID:495
    • /usr/bin/syslog
      /usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
      1⤵
        PID:496
      • /bin/sh
        sh -c "sudo /bin/zsh -c \"/Users/run/IMG-20230503-WA0006.jpg\""
        1⤵
          PID:498
        • /bin/bash
          sh -c "sudo /bin/zsh -c \"/Users/run/IMG-20230503-WA0006.jpg\""
          1⤵
            PID:498
          • /bin/bash
            sh -c "sudo /bin/zsh -c \"/Users/run/IMG-20230503-WA0006.jpg\""
            1⤵
              PID:498
            • /usr/bin/sudo
              sudo /bin/zsh -c /Users/run/IMG-20230503-WA0006.jpg
              1⤵
                PID:498
              • /usr/bin/sudo
                sudo /bin/zsh -c /Users/run/IMG-20230503-WA0006.jpg
                1⤵
                  PID:498
                  • /bin/zsh
                    /bin/zsh -c /Users/run/IMG-20230503-WA0006.jpg
                    2⤵
                      PID:510
                    • /bin/zsh
                      /bin/zsh -c /Users/run/IMG-20230503-WA0006.jpg
                      2⤵
                        PID:510
                      • /Users/run/IMG-20230503-WA0006.jpg
                        /Users/run/IMG-20230503-WA0006.jpg
                        2⤵
                          PID:510
                        • /Users/run/IMG-20230503-WA0006.jpg
                          /Users/run/IMG-20230503-WA0006.jpg
                          2⤵
                            PID:510

                        Network

                        MITRE ATT&CK Matrix

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads