Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    128s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    24/05/2023, 04:42

General

  • Target

    darwin.amd64/VBoxNvmeR3.dylib

  • Size

    73KB

  • MD5

    af7fdaa24d4220474a69e743327b2757

  • SHA1

    74636d17f11d2ea269a5642a606a6ba10f222742

  • SHA256

    4664d4699d28e76e0ee5f9c2ed8f8cd1af5db950b79ba66e00e09566a84717aa

  • SHA512

    b67fa17af8748454361634ed71e3a259309f63cb15b056e1bdf3df9241a26bff21d55c43b6c69013388e3b91a14206ec2744849ae33b75e409a6f4b769b4421a

  • SSDEEP

    768:iMieN8Yp20Y+Sq1LiBAJDDhgg3Qw2owEKbzi7H9VIGW8GjVbC8emcsSmpH+RgezU:HNriSPgFw2ow/u04sV+RgyeNK

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/darwin.amd64/VBoxNvmeR3.dylib\""
    1⤵
      PID:513
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/darwin.amd64/VBoxNvmeR3.dylib\""
      1⤵
        PID:513
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/darwin.amd64/VBoxNvmeR3.dylib\""
        1⤵
          PID:513
        • /usr/bin/sudo
          sudo /bin/zsh -c /Users/run/darwin.amd64/VBoxNvmeR3.dylib
          1⤵
            PID:513
          • /usr/bin/sudo
            sudo /bin/zsh -c /Users/run/darwin.amd64/VBoxNvmeR3.dylib
            1⤵
              PID:513
              • /bin/zsh
                /bin/zsh -c /Users/run/darwin.amd64/VBoxNvmeR3.dylib
                2⤵
                  PID:514
                • /bin/zsh
                  /bin/zsh -c /Users/run/darwin.amd64/VBoxNvmeR3.dylib
                  2⤵
                    PID:514
                  • /Users/run/darwin.amd64/VBoxNvmeR3.dylib
                    /Users/run/darwin.amd64/VBoxNvmeR3.dylib
                    2⤵
                      PID:514
                    • /Users/run/darwin.amd64/VBoxNvmeR3.dylib
                      /Users/run/darwin.amd64/VBoxNvmeR3.dylib
                      2⤵
                        PID:514
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.tailspind
                      1⤵
                        PID:524
                      • /usr/libexec/tailspind
                        /usr/libexec/tailspind
                        1⤵
                          PID:524

                        Network

                        MITRE ATT&CK Matrix

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads