Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
4Static
static
3ExtPack-license.html
windows7-x64
1ExtPack-license.html
windows10-2004-x64
1ExtPack-license.rtf
windows7-x64
4ExtPack-license.rtf
windows10-2004-x64
1darwin.amd....dylib
macos-10.15-amd64
1darwin.amd...eR0.r0
macos-10.15-amd64
1darwin.amd....dylib
macos-10.15-amd64
1darwin.amd....dylib
macos-10.15-amd64
1darwin.amd....dylib
macos-10.15-amd64
1darwin.amd....dylib
macos-10.15-amd64
1darwin.amd....dylib
macos-10.15-amd64
1darwin.amd....dylib
macos-10.15-amd64
1darwin.amd....dylib
macos-10.15-amd64
1darwin.amd....dylib
macos-10.15-amd64
1darwin.arm....dylib
macos-10.15-amd64
1darwin.arm....dylib
macos-10.15-amd64
1darwin.arm....dylib
macos-10.15-amd64
1darwin.arm....dylib
macos-10.15-amd64
1darwin.arm....dylib
macos-10.15-amd64
1darwin.arm....dylib
macos-10.15-amd64
1darwin.arm....dylib
macos-10.15-amd64
1darwin.arm....dylib
macos-10.15-amd64
1linux.amd6...cam.so
ubuntu-18.04-amd64
1linux.amd6...eR0.r0
ubuntu-18.04-amd64
1linux.amd6...eR3.so
ubuntu-18.04-amd64
1linux.amd6...pto.so
ubuntu-18.04-amd64
1linux.amd6...ain.so
ubuntu-18.04-amd64
1linux.amd6...nVM.so
ubuntu-18.04-amd64
1linux.amd6...rR3.so
ubuntu-18.04-amd64
1linux.amd6...mR3.so
ubuntu-18.04-amd64
1linux.amd6...RDP.so
ubuntu-18.04-amd64
1linux.amd6...ypt.so
ubuntu-18.04-amd64
1Analysis
-
max time kernel
145s -
max time network
153s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
24/05/2023, 04:42
Static task
static1
Behavioral task
behavioral1
Sample
ExtPack-license.html
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ExtPack-license.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
ExtPack-license.rtf
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
ExtPack-license.rtf
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
darwin.amd64/VBoxHostWebcam.dylib
Resource
macos-20220504-en
Behavioral task
behavioral6
Sample
darwin.amd64/VBoxNvmeR0.r0
Resource
macos-20220504-en
Behavioral task
behavioral7
Sample
darwin.amd64/VBoxNvmeR3.dylib
Resource
macos-20220504-en
Behavioral task
behavioral8
Sample
darwin.amd64/VBoxPuelCrypto.dylib
Resource
macos-20220504-en
Behavioral task
behavioral9
Sample
darwin.amd64/VBoxPuelMain.dylib
Resource
macos-20220504-en
Behavioral task
behavioral10
Sample
darwin.amd64/VBoxPuelMainVM.dylib
Resource
macos-20220504-en
Behavioral task
behavioral11
Sample
darwin.amd64/VBoxUsbCardReaderR3.dylib
Resource
macos-20220504-en
Behavioral task
behavioral12
Sample
darwin.amd64/VBoxUsbWebcamR3.dylib
Resource
macos-20220504-en
Behavioral task
behavioral13
Sample
darwin.amd64/VBoxVRDP.dylib
Resource
macos-20220504-en
Behavioral task
behavioral14
Sample
darwin.amd64/VDPluginCrypt.dylib
Resource
macos-20220504-en
Behavioral task
behavioral15
Sample
darwin.arm64/VBoxNvmeR3.dylib
Resource
macos-20220504-en
Behavioral task
behavioral16
Sample
darwin.arm64/VBoxPuelCrypto.dylib
Resource
macos-20220504-en
Behavioral task
behavioral17
Sample
darwin.arm64/VBoxPuelMain.dylib
Resource
macos-20220504-en
Behavioral task
behavioral18
Sample
darwin.arm64/VBoxPuelMainVM.dylib
Resource
macos-20220504-en
Behavioral task
behavioral19
Sample
darwin.arm64/VBoxUsbCardReaderR3.dylib
Resource
macos-20220504-en
Behavioral task
behavioral20
Sample
darwin.arm64/VBoxUsbWebcamR3.dylib
Resource
macos-20220504-en
Behavioral task
behavioral21
Sample
darwin.arm64/VBoxVRDP.dylib
Resource
macos-20220504-en
Behavioral task
behavioral22
Sample
darwin.arm64/VDPluginCrypt.dylib
Resource
macos-20220504-en
Behavioral task
behavioral23
Sample
linux.amd64/VBoxHostWebcam.so
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral24
Sample
linux.amd64/VBoxNvmeR0.r0
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral25
Sample
linux.amd64/VBoxNvmeR3.so
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral26
Sample
linux.amd64/VBoxPuelCrypto.so
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral27
Sample
linux.amd64/VBoxPuelMain.so
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral28
Sample
linux.amd64/VBoxPuelMainVM.so
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral29
Sample
linux.amd64/VBoxUsbCardReaderR3.so
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral30
Sample
linux.amd64/VBoxUsbWebcamR3.so
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral31
Sample
linux.amd64/VBoxVRDP.so
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral32
Sample
linux.amd64/VDPluginCrypt.so
Resource
ubuntu1804-amd64-en-20211208
General
-
Target
darwin.arm64/VBoxPuelMain.dylib
-
Size
4.6MB
-
MD5
0e7f66b1cffd0838cb8adee3483475a5
-
SHA1
6665ae0a91368b6e6e375e4b794988f95be72fa4
-
SHA256
d013fd6257c1165fb1034da1b4f6a5c8dc43e104b6e8a1cae63e6b569dc0b4ab
-
SHA512
2eceebb9cb32c46b99affb6c20a3353f4c314fb6af65bb7417ad8c22f208f3cc27c9c187118a8b4ec90fce84cc2bcca45227ab89dc475935e6a85b3d0a6234ec
-
SSDEEP
24576:1SH0tuknNe6RW3f0ekeLjTjMl+yk16sST/0QIt6j+e+BEobqAwoImn1GP4Vx9M9p:1UsNe6Rc2sS09nEobqA11
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/darwin.arm64/VBoxPuelMain.dylib\""1⤵PID:515
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/darwin.arm64/VBoxPuelMain.dylib\""1⤵PID:515
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/darwin.arm64/VBoxPuelMain.dylib\""1⤵PID:515
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/darwin.arm64/VBoxPuelMain.dylib1⤵PID:515
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/darwin.arm64/VBoxPuelMain.dylib1⤵PID:515
-
/bin/zsh/bin/zsh -c /Users/run/darwin.arm64/VBoxPuelMain.dylib2⤵PID:516
-
-
/bin/zsh/bin/zsh -c /Users/run/darwin.arm64/VBoxPuelMain.dylib2⤵PID:516
-
-
/Users/run/darwin.arm64/VBoxPuelMain.dylib/Users/run/darwin.arm64/VBoxPuelMain.dylib2⤵PID:516
-
-
/Users/run/darwin.arm64/VBoxPuelMain.dylib/Users/run/darwin.arm64/VBoxPuelMain.dylib2⤵PID:516
-