Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    129s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    24/05/2023, 04:42

General

  • Target

    darwin.arm64/VBoxUsbCardReaderR3.dylib

  • Size

    100KB

  • MD5

    f0bd75f5e16ce2f3cf07c3839f68f2f6

  • SHA1

    445951df087e002009ca9c0c640e0a878c93c66b

  • SHA256

    ddd0ae1282039a6f78321e34e237ee434860c576b1e683ef33aee0007af77644

  • SHA512

    df67690c64df0fee890de00696aea841b185732a6e32185d86418c74565301e6664fb36c29b11e5d05ea4f312881637dd007e2c8bc53c3ed271b5e4297432312

  • SSDEEP

    1536:224n08TaNi7PKkMbGzuj8Wl3DcU/wi4ONK77L:27JTap74ujVp/A7

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/darwin.arm64/VBoxUsbCardReaderR3.dylib\""
    1⤵
      PID:512
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/darwin.arm64/VBoxUsbCardReaderR3.dylib\""
      1⤵
        PID:512
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/darwin.arm64/VBoxUsbCardReaderR3.dylib\""
        1⤵
          PID:512
        • /usr/bin/sudo
          sudo /bin/zsh -c /Users/run/darwin.arm64/VBoxUsbCardReaderR3.dylib
          1⤵
            PID:512
          • /usr/bin/sudo
            sudo /bin/zsh -c /Users/run/darwin.arm64/VBoxUsbCardReaderR3.dylib
            1⤵
              PID:512
              • /bin/zsh
                /bin/zsh -c /Users/run/darwin.arm64/VBoxUsbCardReaderR3.dylib
                2⤵
                  PID:513
                • /bin/zsh
                  /bin/zsh -c /Users/run/darwin.arm64/VBoxUsbCardReaderR3.dylib
                  2⤵
                    PID:513
                  • /Users/run/darwin.arm64/VBoxUsbCardReaderR3.dylib
                    /Users/run/darwin.arm64/VBoxUsbCardReaderR3.dylib
                    2⤵
                      PID:513
                    • /Users/run/darwin.arm64/VBoxUsbCardReaderR3.dylib
                      /Users/run/darwin.arm64/VBoxUsbCardReaderR3.dylib
                      2⤵
                        PID:513
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.tailspind
                      1⤵
                        PID:527
                      • /usr/libexec/tailspind
                        /usr/libexec/tailspind
                        1⤵
                          PID:527

                        Network

                        MITRE ATT&CK Matrix

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads