Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
4Static
static
1Payload/Li...beriOS
macos-10.15-amd64
1amfidebilitate
macos-10.15-amd64
1bin/bash
macos-10.15-amd64
4bin/cat
macos-10.15-amd64
1bin/chmod
macos-10.15-amd64
1bin/cp
macos-10.15-amd64
4bin/date
macos-10.15-amd64
1bin/dd
macos-10.15-amd64
4bin/hostname
macos-10.15-amd64
1bin/kill
macos-10.15-amd64
1bin/launchctl
macos-10.15-amd64
1bin/ln
macos-10.15-amd64
4bin/ls
macos-10.15-amd64
1bin/mkdir
macos-10.15-amd64
4bin/mv
macos-10.15-amd64
1bin/pwd
macos-10.15-amd64
1bin/rm
macos-10.15-amd64
4bin/rmdir
macos-10.15-amd64
1bin/sh
macos-10.15-amd64
1bin/sleep
macos-10.15-amd64
1bin/stty
macos-10.15-amd64
4bin/sync
macos-10.15-amd64
1bin/zsh
macos-10.15-amd64
1makeMeAtHome.sh
windows7-x64
3makeMeAtHome.sh
windows10-2004-x64
3sbin/dmesg
macos-10.15-amd64
sbin/ifconfig
macos-10.15-amd64
4sbin/kextunload
macos-10.15-amd64
1sbin/md5
macos-10.15-amd64
1sbin/mknod
macos-10.15-amd64
4sbin/ping
macos-10.15-amd64
1sbin/shutdown
macos-10.15-amd64
1Analysis
-
max time kernel
120s -
max time network
120s -
platform
macos-10.15_amd64 -
resource
macos-20240410-en -
resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
15/05/2024, 06:49
Static task
static1
Behavioral task
behavioral1
Sample
Payload/LiberiOS.app/LiberiOS
Resource
macos-20240410-en
Behavioral task
behavioral2
Sample
amfidebilitate
Resource
macos-20240410-en
Behavioral task
behavioral3
Sample
bin/bash
Resource
macos-20240410-en
Behavioral task
behavioral4
Sample
bin/cat
Resource
macos-20240410-en
Behavioral task
behavioral5
Sample
bin/chmod
Resource
macos-20240410-en
Behavioral task
behavioral6
Sample
bin/cp
Resource
macos-20240410-en
Behavioral task
behavioral7
Sample
bin/date
Resource
macos-20240410-en
Behavioral task
behavioral8
Sample
bin/dd
Resource
macos-20240410-en
Behavioral task
behavioral9
Sample
bin/hostname
Resource
macos-20240410-en
Behavioral task
behavioral10
Sample
bin/kill
Resource
macos-20240410-en
Behavioral task
behavioral11
Sample
bin/launchctl
Resource
macos-20240410-en
Behavioral task
behavioral12
Sample
bin/ln
Resource
macos-20240410-en
Behavioral task
behavioral13
Sample
bin/ls
Resource
macos-20240410-en
Behavioral task
behavioral14
Sample
bin/mkdir
Resource
macos-20240410-en
Behavioral task
behavioral15
Sample
bin/mv
Resource
macos-20240410-en
Behavioral task
behavioral16
Sample
bin/pwd
Resource
macos-20240410-en
Behavioral task
behavioral17
Sample
bin/rm
Resource
macos-20240410-en
Behavioral task
behavioral18
Sample
bin/rmdir
Resource
macos-20240410-en
Behavioral task
behavioral19
Sample
bin/sh
Resource
macos-20240410-en
Behavioral task
behavioral20
Sample
bin/sleep
Resource
macos-20240410-en
Behavioral task
behavioral21
Sample
bin/stty
Resource
macos-20240410-en
Behavioral task
behavioral22
Sample
bin/sync
Resource
macos-20240410-en
Behavioral task
behavioral23
Sample
bin/zsh
Resource
macos-20240410-en
Behavioral task
behavioral24
Sample
makeMeAtHome.sh
Resource
win7-20240508-en
Behavioral task
behavioral25
Sample
makeMeAtHome.sh
Resource
win10v2004-20240426-en
Behavioral task
behavioral26
Sample
sbin/dmesg
Resource
macos-20240410-en
Behavioral task
behavioral27
Sample
sbin/ifconfig
Resource
macos-20240410-en
Behavioral task
behavioral28
Sample
sbin/kextunload
Resource
macos-20240410-en
Behavioral task
behavioral29
Sample
sbin/md5
Resource
macos-20240410-en
Behavioral task
behavioral30
Sample
sbin/mknod
Resource
macos-20240410-en
Behavioral task
behavioral31
Sample
sbin/ping
Resource
macos-20240410-en
Behavioral task
behavioral32
Sample
sbin/shutdown
Resource
macos-20240410-en
General
-
Target
sbin/ping
-
Size
70KB
-
MD5
71c4d6694254341d99c238ef563cd03c
-
SHA1
db4bb541956cf40324a429049f6286a9e5f15e07
-
SHA256
effcaed28dd5a0f5baa5c295b3be50abb76dd425bb2944313ee7ed8edce5b8e3
-
SHA512
6c9b8e09d65d0c166663bad2415ea5166a8ed058aee50278621c862f5b17e2e5450a81db4e3acf8b2ea98c70aeb1f616be5283517582808a759ead173ee229f6
-
SSDEEP
768:Q6Oc96JnFt6poX4wvtbQBWvJsd3dBqJuz79Dl:9N6JFtflJQwvJsdNMJw
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/sbin/ping\""1⤵PID:508
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/sbin/ping\""1⤵PID:508
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/sbin/ping1⤵PID:508
-
/bin/zsh/bin/zsh -c /Users/run/sbin/ping2⤵PID:509
-
-
/Users/run/sbin/ping/Users/run/sbin/ping2⤵PID:509
-