Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
4Static
static
1Payload/Li...beriOS
macos-10.15-amd64
1amfidebilitate
macos-10.15-amd64
1bin/bash
macos-10.15-amd64
4bin/cat
macos-10.15-amd64
1bin/chmod
macos-10.15-amd64
1bin/cp
macos-10.15-amd64
4bin/date
macos-10.15-amd64
1bin/dd
macos-10.15-amd64
4bin/hostname
macos-10.15-amd64
1bin/kill
macos-10.15-amd64
1bin/launchctl
macos-10.15-amd64
1bin/ln
macos-10.15-amd64
4bin/ls
macos-10.15-amd64
1bin/mkdir
macos-10.15-amd64
4bin/mv
macos-10.15-amd64
1bin/pwd
macos-10.15-amd64
1bin/rm
macos-10.15-amd64
4bin/rmdir
macos-10.15-amd64
1bin/sh
macos-10.15-amd64
1bin/sleep
macos-10.15-amd64
1bin/stty
macos-10.15-amd64
4bin/sync
macos-10.15-amd64
1bin/zsh
macos-10.15-amd64
1makeMeAtHome.sh
windows7-x64
3makeMeAtHome.sh
windows10-2004-x64
3sbin/dmesg
macos-10.15-amd64
sbin/ifconfig
macos-10.15-amd64
4sbin/kextunload
macos-10.15-amd64
1sbin/md5
macos-10.15-amd64
1sbin/mknod
macos-10.15-amd64
4sbin/ping
macos-10.15-amd64
1sbin/shutdown
macos-10.15-amd64
1Analysis
-
max time kernel
138s -
max time network
121s -
platform
macos-10.15_amd64 -
resource
macos-20240410-en -
resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
15/05/2024, 06:49
Static task
static1
Behavioral task
behavioral1
Sample
Payload/LiberiOS.app/LiberiOS
Resource
macos-20240410-en
Behavioral task
behavioral2
Sample
amfidebilitate
Resource
macos-20240410-en
Behavioral task
behavioral3
Sample
bin/bash
Resource
macos-20240410-en
Behavioral task
behavioral4
Sample
bin/cat
Resource
macos-20240410-en
Behavioral task
behavioral5
Sample
bin/chmod
Resource
macos-20240410-en
Behavioral task
behavioral6
Sample
bin/cp
Resource
macos-20240410-en
Behavioral task
behavioral7
Sample
bin/date
Resource
macos-20240410-en
Behavioral task
behavioral8
Sample
bin/dd
Resource
macos-20240410-en
Behavioral task
behavioral9
Sample
bin/hostname
Resource
macos-20240410-en
Behavioral task
behavioral10
Sample
bin/kill
Resource
macos-20240410-en
Behavioral task
behavioral11
Sample
bin/launchctl
Resource
macos-20240410-en
Behavioral task
behavioral12
Sample
bin/ln
Resource
macos-20240410-en
Behavioral task
behavioral13
Sample
bin/ls
Resource
macos-20240410-en
Behavioral task
behavioral14
Sample
bin/mkdir
Resource
macos-20240410-en
Behavioral task
behavioral15
Sample
bin/mv
Resource
macos-20240410-en
Behavioral task
behavioral16
Sample
bin/pwd
Resource
macos-20240410-en
Behavioral task
behavioral17
Sample
bin/rm
Resource
macos-20240410-en
Behavioral task
behavioral18
Sample
bin/rmdir
Resource
macos-20240410-en
Behavioral task
behavioral19
Sample
bin/sh
Resource
macos-20240410-en
Behavioral task
behavioral20
Sample
bin/sleep
Resource
macos-20240410-en
Behavioral task
behavioral21
Sample
bin/stty
Resource
macos-20240410-en
Behavioral task
behavioral22
Sample
bin/sync
Resource
macos-20240410-en
Behavioral task
behavioral23
Sample
bin/zsh
Resource
macos-20240410-en
Behavioral task
behavioral24
Sample
makeMeAtHome.sh
Resource
win7-20240508-en
Behavioral task
behavioral25
Sample
makeMeAtHome.sh
Resource
win10v2004-20240426-en
Behavioral task
behavioral26
Sample
sbin/dmesg
Resource
macos-20240410-en
Behavioral task
behavioral27
Sample
sbin/ifconfig
Resource
macos-20240410-en
Behavioral task
behavioral28
Sample
sbin/kextunload
Resource
macos-20240410-en
Behavioral task
behavioral29
Sample
sbin/md5
Resource
macos-20240410-en
Behavioral task
behavioral30
Sample
sbin/mknod
Resource
macos-20240410-en
Behavioral task
behavioral31
Sample
sbin/ping
Resource
macos-20240410-en
Behavioral task
behavioral32
Sample
sbin/shutdown
Resource
macos-20240410-en
General
-
Target
bin/cat
-
Size
51KB
-
MD5
11c8f0772eec75264ac3444b85bd8536
-
SHA1
a36a84f0b59e88f4031ca3d58433a1dfe855673c
-
SHA256
8ba121410160895375e176a6716b5798be85737cc4256422e8d437eb5971939c
-
SHA512
485d8c699c3b533fe09750c4220a5e53d1317a5ff14d9602a9dfa421856a1f2d9e626347b56cfb894249c3a731f52e54b38f8b58acd1dca25d3b38ee34d29268
-
SSDEEP
192:aoZl+Ox1hBYDW7/9EBC33332YojqszPK0Td:aoZcERYDW7/u4HGYoj00
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/bin/cat\""1⤵PID:489
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/bin/cat\""1⤵PID:489
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/bin/cat1⤵PID:489
-
/bin/zsh/bin/zsh -c /Users/run/bin/cat2⤵PID:498
-
-
/Users/run/bin/cat/Users/run/bin/cat2⤵PID:498
-