Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
02/06/2023, 13:36
230602-qv9tmsbf25 730/05/2023, 13:15
230530-qhnewahg23 130/05/2023, 13:11
230530-qe6r2shf83 126/05/2023, 22:43
230526-2nf4jahe24 1Analysis
-
max time kernel
134s -
max time network
126s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
26/05/2023, 22:43
Static task
static1
Behavioral task
behavioral1
Sample
wallpaper.jpg
Resource
macos-20220504-en
General
-
Target
wallpaper.jpg
-
Size
2KB
-
MD5
d5bf33cc7434d7b3735562ef0ced129e
-
SHA1
7e017dd951a5b8ca2298fae493ceea47efb8e625
-
SHA256
ca981e42b7a18a592e2dc84e5a1f09edc18ca6e10c8d04e5967506c3af81144d
-
SHA512
eb1d024d2d5abd4f5f3b1eb948443ff1b5d5eb2a9bfcc1798f90f8e17630f3c6340c09812c1a5cbc9127a42425eb69aaed192fad19218adc48190357ec061453
Malware Config
Signatures
Processes
-
/usr/sbin/spctl/usr/sbin/spctl --test-devid-status1⤵PID:502
-
/usr/bin/syslog/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"1⤵PID:503
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/wallpaper.jpg\""1⤵PID:504
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/wallpaper.jpg\""1⤵PID:504
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/wallpaper.jpg\""1⤵PID:504
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/wallpaper.jpg1⤵PID:504
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/wallpaper.jpg1⤵PID:504
-
/bin/zsh/bin/zsh -c /Users/run/wallpaper.jpg2⤵PID:506
-
-
/bin/zsh/bin/zsh -c /Users/run/wallpaper.jpg2⤵PID:506
-
-
/Users/run/wallpaper.jpg/Users/run/wallpaper.jpg2⤵PID:506
-
-
/Users/run/wallpaper.jpg/Users/run/wallpaper.jpg2⤵PID:506
-
-
/usr/bin/bzip2/usr/bin/bzip2 -f /var/log/wifi.log.01⤵PID:523
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
637B
MD576fc92ba34aacf116b4be7321db0fac9
SHA1668c2fb50eaa9293697f0249badfa8b9b892bf82
SHA256a78be8f4b3ee14f9f03dcd3ac36a42e52f3e0809c670085973e26c8dcfae76cc
SHA512d2e14e0a79b521121f364de8831360ffbe5deabcf81248153690803fcefa4701dce2b3bb22d323a3a9d065442e5aba2427a47a1c629c8ad2ec1c57fcfef8b136
-
Filesize
637B
MD576fc92ba34aacf116b4be7321db0fac9
SHA1668c2fb50eaa9293697f0249badfa8b9b892bf82
SHA256a78be8f4b3ee14f9f03dcd3ac36a42e52f3e0809c670085973e26c8dcfae76cc
SHA512d2e14e0a79b521121f364de8831360ffbe5deabcf81248153690803fcefa4701dce2b3bb22d323a3a9d065442e5aba2427a47a1c629c8ad2ec1c57fcfef8b136