Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
1Screenshot...19.png
windows11-21h2-x64
7Screenshot...19.png
android-9-x86
Screenshot...19.png
macos-10.15-amd64
1Screenshot...19.png
macos-10.15-amd64
1Screenshot...19.png
debian-9-armhf
Screenshot...19.png
debian-9-mips
Screenshot...19.png
debian-9-mipsel
Screenshot...19.png
ubuntu-18.04-amd64
Analysis
-
max time kernel
127s -
max time network
143s -
platform
macos-10.15_amd64 -
resource
macos-20231201-en -
resource tags
arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
04/02/2024, 10:43
Static task
static1
Behavioral task
behavioral1
Sample
Screenshot 2023-12-23 100219.png
Resource
win11-20231222-en
Behavioral task
behavioral2
Sample
Screenshot 2023-12-23 100219.png
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral3
Sample
Screenshot 2023-12-23 100219.png
Resource
macos-20231201-en
Behavioral task
behavioral4
Sample
Screenshot 2023-12-23 100219.png
Resource
macos-20231201-en
Behavioral task
behavioral5
Sample
Screenshot 2023-12-23 100219.png
Resource
debian9-armhf-20231221-en
Behavioral task
behavioral6
Sample
Screenshot 2023-12-23 100219.png
Resource
debian9-mipsbe-20231222-en
Behavioral task
behavioral7
Sample
Screenshot 2023-12-23 100219.png
Resource
debian9-mipsel-20231221-en
Behavioral task
behavioral8
Sample
Screenshot 2023-12-23 100219.png
Resource
ubuntu1804-amd64-20231215-en
General
-
Target
Screenshot 2023-12-23 100219.png
-
Size
557KB
-
MD5
6b1e21e07588887f92a9c7d3cbf385b7
-
SHA1
09aafa42d80ee5e60e23e3dbc94fc196a5b87371
-
SHA256
7b0d98f84abafdd8468c6bf535efe6089cd438782641da3e4a823f399aaf4f0e
-
SHA512
aad0cba15a05f89659030d12fc2aeba1760c2974ff9df765895e530ec10edde0b1141c3a3d69632dd85fb4f93cdcb7f3c2f1eb48b7670400219324da22dd8ee3
-
SSDEEP
12288:Xrbbt3kPdrq22IYD/NQRAuIKCp00ywx8ZgSdtDV:XBkPNqXD/NQRpR0ywx8OY
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Screenshot 2023-12-23 100219.png\""1⤵PID:521
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Screenshot 2023-12-23 100219.png\""1⤵PID:521
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Screenshot 2023-12-23 100219.png"1⤵PID:521
-
/bin/zsh/bin/zsh -c "/Users/run/Screenshot 2023-12-23 100219.png"2⤵PID:522
-
-
/Users/run/Screenshot/Users/run/Screenshot 2023-12-23 100219.png2⤵PID:522
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.systemsoundserverd1⤵PID:526
-
/usr/sbin/systemsoundserverd/usr/sbin/systemsoundserverd1⤵PID:526
-
/usr/libexec/xpcproxyxpcproxy com.apple.pbs1⤵PID:527
-
/System/Library/CoreServices/pbs/System/Library/CoreServices/pbs1⤵PID:527
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:528
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:528
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:566
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:566