Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

27/05/2024, 11:03

240527-m54tlahb6y 7

18/05/2024, 11:06

240518-m7tfmsgd9y 7

General

  • Target

    Launcher (1).dmg

  • Size

    1006KB

  • Sample

    240527-m54tlahb6y

  • MD5

    c92da1857605ceb898ee160fbaa34ef9

  • SHA1

    ed8b41a86b5ec09c6c3a03a5a43a42a35c2d1ede

  • SHA256

    1b61497cc0b24f7a1caef2440986c9a82a2dd83acbe2e99ca6a3287581d742bb

  • SHA512

    dfa0b79a09022b86ccda8c9a594576e3d74b383d87da200aaa31bdad4fc65eea248bca6d6e42e78059e78862d10c73676fc2701f67243238141ac82ab74fa2dd

  • SSDEEP

    24576:FRex1zkDCG082nYMhLCUa8G7dXiyOrhgbqvpekWO:FERG082nZ4Ua8GJyyOrhgr6

Malware Config

Targets

    • Target

      Launcher (1).dmg

    • Size

      1006KB

    • MD5

      c92da1857605ceb898ee160fbaa34ef9

    • SHA1

      ed8b41a86b5ec09c6c3a03a5a43a42a35c2d1ede

    • SHA256

      1b61497cc0b24f7a1caef2440986c9a82a2dd83acbe2e99ca6a3287581d742bb

    • SHA512

      dfa0b79a09022b86ccda8c9a594576e3d74b383d87da200aaa31bdad4fc65eea248bca6d6e42e78059e78862d10c73676fc2701f67243238141ac82ab74fa2dd

    • SSDEEP

      24576:FRex1zkDCG082nYMhLCUa8G7dXiyOrhgbqvpekWO:FERG082nZ4Ua8GJyyOrhgr6

    • Queries the macOS version information.

      An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.

    • System Checks

      Adversaries may employ various system checks to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox.

    • File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.

MITRE ATT&CK Enterprise v15

Tasks