Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    368s
  • max time network
    1571s
  • platform
    macos-10.15_amd64
  • resource
    macos-20231201-en
  • resource tags

    arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    30/12/2023, 17:45

General

  • Target

    main page.html

  • Size

    520B

  • MD5

    4bc43c9ef40034c31c09953a0f1e712b

  • SHA1

    d5baa8c096ce5467cee064a28a865b82abb3ef1b

  • SHA256

    160d0f0c9b58a9ffb4a4b54aacb42ba69e94f878253b83cbbb50c119f5ac1e8c

  • SHA512

    cef0d32bf9853198c3618ea437f85d337f22de40da4332a5c96990fa5ece783623364f590a5b0c59843cfa4b3af11222014bdac6b2958c55930581ededf55c74

Score
1/10

Malware Config

Signatures

Processes

  • /usr/sbin/spctl
    /usr/sbin/spctl --status
    1⤵
      PID:510
    • /usr/sbin/spctl
      /usr/sbin/spctl --test-devid-status
      1⤵
        PID:511
      • /usr/bin/syslog
        /usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
        1⤵
          PID:512
        • /bin/sh
          sh -c "sudo /bin/zsh -c \"/Users/run/main page.html\""
          1⤵
            PID:513
          • /bin/bash
            sh -c "sudo /bin/zsh -c \"/Users/run/main page.html\""
            1⤵
              PID:513
            • /bin/bash
              sh -c "sudo /bin/zsh -c \"/Users/run/main page.html\""
              1⤵
                PID:513
              • /usr/bin/sudo
                sudo /bin/zsh -c "/Users/run/main page.html"
                1⤵
                  PID:513
                • /usr/bin/sudo
                  sudo /bin/zsh -c "/Users/run/main page.html"
                  1⤵
                    PID:513
                    • /bin/zsh
                      /bin/zsh -c "/Users/run/main page.html"
                      2⤵
                        PID:514
                      • /bin/zsh
                        /bin/zsh -c "/Users/run/main page.html"
                        2⤵
                          PID:514
                        • /Users/run/main
                          /Users/run/main page.html
                          2⤵
                            PID:514
                          • /Users/run/main
                            /Users/run/main page.html
                            2⤵
                              PID:514
                          • /usr/libexec/xpcproxy
                            xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
                            1⤵
                              PID:553
                            • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                              /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                              1⤵
                                PID:553
                              • /usr/libexec/xpcproxy
                                xpcproxy com.apple.spindump
                                1⤵
                                  PID:563
                                • /usr/sbin/spindump
                                  /usr/sbin/spindump
                                  1⤵
                                    PID:563
                                  • /usr/libexec/xpcproxy
                                    xpcproxy com.apple.diagnosticd
                                    1⤵
                                      PID:564
                                    • /usr/libexec/diagnosticd
                                      /usr/libexec/diagnosticd
                                      1⤵
                                        PID:564

                                      Network

                                      MITRE ATT&CK Matrix

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads