Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
355s -
max time network
1584s -
platform
macos-10.15_amd64 -
resource
macos-20240410-en -
resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
16/05/2024, 12:34
Static task
static1
Behavioral task
behavioral1
Sample
Capture.png
Resource
macos-20240410-en
0 signatures
1800 seconds
General
-
Target
Capture.png
-
Size
164B
-
MD5
fd31fa8e8f70ced7327bb1d98741e707
-
SHA1
033828ca2e9e777a436d4a0b42f6d34ddd8c2804
-
SHA256
44ce48ed429566bfc0d0e6329d6d1c8b24464df95c2f6c62e5d6f99856161c0b
-
SHA512
3272bc9b865d3050bbda4502d2dec47dab5e5a4d5e170eb2cbf165d8d46df0cc9b3c8152dfd9c1f3903bd7a0316afbfcd82fd170c656f106d938941871c3b271
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Capture.png\""1⤵PID:482
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Capture.png\""1⤵PID:482
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Capture.png1⤵PID:482
-
/bin/zsh/bin/zsh -c /Users/run/Capture.png2⤵PID:483
-
-
/Users/run/Capture.png/Users/run/Capture.png2⤵PID:483
-
-
/usr/sbin/spctl/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app1⤵PID:528
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:534
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:535
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:544
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:544
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:546
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:546
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:547
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:547