Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    PartyLauncher.dmg

  • Size

    1020KB

  • Sample

    240614-rywxmaycqr

  • MD5

    48715b3d4790765be0559e7685c8444e

  • SHA1

    282859846061cd7450db71557fbeadd066915a30

  • SHA256

    d4316d594e5fe9d58fe3ab154c5a9782b610666d8be129029ba1aa3275c0e623

  • SHA512

    f84a739b643eb49d9b6ca62ea68c74d9f3064516f82befd3355130de9a995b79751d563ef770b1b4e06f02d8363b734f78cff22c668a8089496f8048924eeb05

  • SSDEEP

    24576:TJPkBUOLo+CG+8Q8XCEK8Mi9pjyOrhgbqvpekWOvy:oUOmG+8Q5EK8MSRyOrhgr6

Malware Config

Targets

    • Target

      PartyLauncher.dmg

    • Size

      1020KB

    • MD5

      48715b3d4790765be0559e7685c8444e

    • SHA1

      282859846061cd7450db71557fbeadd066915a30

    • SHA256

      d4316d594e5fe9d58fe3ab154c5a9782b610666d8be129029ba1aa3275c0e623

    • SHA512

      f84a739b643eb49d9b6ca62ea68c74d9f3064516f82befd3355130de9a995b79751d563ef770b1b4e06f02d8363b734f78cff22c668a8089496f8048924eeb05

    • SSDEEP

      24576:TJPkBUOLo+CG+8Q8XCEK8Mi9pjyOrhgbqvpekWOvy:oUOmG+8Q5EK8MSRyOrhgr6

    • Queries the macOS version information.

      An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.

    • System Checks

      Adversaries may employ various system checks to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox.

    • File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.

MITRE ATT&CK Enterprise v15

Tasks