Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    140s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    10/05/2023, 12:38

General

  • Target

    e2733d3f9c1f30252c575cabd13c0c11ee609c742e3365262811ff423072fce8

  • Size

    1.2MB

  • MD5

    f7f230e40a8f46f641e1e1b00a5d6c7b

  • SHA1

    b78ec4e10bdf1e94f1c771f32b20ec44e4d2f297

  • SHA256

    e2733d3f9c1f30252c575cabd13c0c11ee609c742e3365262811ff423072fce8

  • SHA512

    6373b38dd751cc12c4b3593243bdda815885a16334629e924ed9dbeeba2f12e66feb4c060f36107741127a70662142bf4dd3897c11e6b788fac35b666078c0b4

  • SSDEEP

    24576:3ncD62aMHm8qnPgYLoke5PNQtfVVrKgI04:3ncD62aMHpoPgYUkeFmtfVVrZI04

Score
1/10

Malware Config

Signatures

Processes

  • /usr/sbin/spctl
    /usr/sbin/spctl --status
    1⤵
      PID:505
    • /usr/sbin/spctl
      /usr/sbin/spctl --test-devid-status
      1⤵
        PID:506
      • /bin/sh
        sh -c "sudo /bin/zsh -c \"/Users/run/e2733d3f9c1f30252c575cabd13c0c11ee609c742e3365262811ff423072fce8\""
        1⤵
          PID:507
        • /bin/bash
          sh -c "sudo /bin/zsh -c \"/Users/run/e2733d3f9c1f30252c575cabd13c0c11ee609c742e3365262811ff423072fce8\""
          1⤵
            PID:507
          • /bin/bash
            sh -c "sudo /bin/zsh -c \"/Users/run/e2733d3f9c1f30252c575cabd13c0c11ee609c742e3365262811ff423072fce8\""
            1⤵
              PID:507
            • /usr/bin/syslog
              /usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
              1⤵
                PID:508
              • /usr/bin/sudo
                sudo /bin/zsh -c /Users/run/e2733d3f9c1f30252c575cabd13c0c11ee609c742e3365262811ff423072fce8
                1⤵
                  PID:507
                • /usr/bin/sudo
                  sudo /bin/zsh -c /Users/run/e2733d3f9c1f30252c575cabd13c0c11ee609c742e3365262811ff423072fce8
                  1⤵
                    PID:507
                    • /bin/zsh
                      /bin/zsh -c /Users/run/e2733d3f9c1f30252c575cabd13c0c11ee609c742e3365262811ff423072fce8
                      2⤵
                        PID:517
                      • /bin/zsh
                        /bin/zsh -c /Users/run/e2733d3f9c1f30252c575cabd13c0c11ee609c742e3365262811ff423072fce8
                        2⤵
                          PID:517
                        • /Users/run/e2733d3f9c1f30252c575cabd13c0c11ee609c742e3365262811ff423072fce8
                          /Users/run/e2733d3f9c1f30252c575cabd13c0c11ee609c742e3365262811ff423072fce8
                          2⤵
                            PID:517
                          • /Users/run/e2733d3f9c1f30252c575cabd13c0c11ee609c742e3365262811ff423072fce8
                            /Users/run/e2733d3f9c1f30252c575cabd13c0c11ee609c742e3365262811ff423072fce8
                            2⤵
                              PID:517

                          Network

                          MITRE ATT&CK Matrix

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads