Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
129s -
max time network
145s -
platform
macos_amd64 -
resource
macos-20220504-en -
resource tags
arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
15/11/2023, 04:22
Static task
static1
Behavioral task
behavioral1
Sample
.html
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
.html
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
.html
Resource
android-x86-arm-20231023-en
Behavioral task
behavioral4
Sample
.html
Resource
android-x64-20231023.1-en
Behavioral task
behavioral5
Sample
.html
Resource
android-x64-arm64-20231023-en
Behavioral task
behavioral6
Sample
.html
Resource
macos-20220504-en
General
-
Target
.html
-
Size
18KB
-
MD5
8318b253535a1dea1cded139c1595582
-
SHA1
24462256c3953cf4004dae519c2b8c9f17e3d1ff
-
SHA256
6dd8489deb3b71a9d3efa35342fd62e3926ab3b41d5a355fea9e32fc22c7505c
-
SHA512
6bd3847d317b13a537f311a3f2a00b08f070025df6f580dea9fd45325bd3d7bf1127c33e5275e7868033423779acaa9f28d6d9474bc5b7b2dc4351bd5bfe619a
-
SSDEEP
384:rxb/cYktDpmReVoOs4bn9ylKeGMUU8HhhboioWG7sMN2wenlhJCBXQL:rJ/cYYBVoOs4b9yI1M+Bhb/IsDfJQQL
Malware Config
Signatures
Processes
-
/usr/sbin/spctl/usr/sbin/spctl --test-devid-status1⤵PID:502
-
/usr/bin/syslog/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"1⤵PID:503
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/.html\""1⤵PID:504
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/.html\""1⤵PID:504
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/.html\""1⤵PID:504
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/.html1⤵PID:504
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/.html1⤵PID:504
-
/bin/zsh/bin/zsh -c /Users/run/.html2⤵PID:507
-
-
/bin/zsh/bin/zsh -c /Users/run/.html2⤵PID:507
-
-
/Users/run/.html/Users/run/.html2⤵PID:507
-
-
/Users/run/.html/Users/run/.html2⤵PID:507
-
-
/bin/shsh /Users/run/.html2⤵PID:507
-
-
/bin/shsh /Users/run/.html2⤵PID:507
-
-
/bin/bashsh /Users/run/.html2⤵PID:507
-
-
/bin/bashsh /Users/run/.html2⤵PID:507
-