e02f5adf1beac248a57f2dbd32fd46617125f00011b7ed04bff6236574f4e66e | Triage

Submit
Reports

Overview

overview

7

Static

static

1

TL_legacy.dmg

macos-10.15-amd64

1

TL Legacy/...cOS/TL

macos-10.15-amd64

1

TL Legacy/...ap.jar

windows7-x64

1

TL Legacy/...ap.jar

windows10-2004-x64

7

TL Legacy/...art.sh

ubuntu-18.04-amd64

3

TL Legacy/...art.sh

debian-9-armhf

3

TL Legacy/...art.sh

debian-9-mips

3

TL Legacy/...art.sh

debian-9-mipsel

3

TL Legacy/...e.html

windows7-x64

1

TL Legacy/...e.html

windows10-2004-x64

1

TL Legacy/...n/java

macos-10.15-amd64

1

TL Legacy/...in/jfr

macos-10.15-amd64

4

TL Legacy/...script

macos-10.15-amd64

4

TL Legacy/...eytool

macos-10.15-amd64

1

TL Legacy/...gistry

macos-10.15-amd64

TL Legacy/...fs.jar

windows7-x64

1

TL Legacy/...fs.jar

windows10-2004-x64

1

TL Legacy/...helper

macos-10.15-amd64

4

TL Legacy/....dylib

macos-10.15-amd64

1

TL Legacy/....dylib

macos-10.15-amd64

4

TL Legacy/....dylib

macos-10.15-amd64

1

TL Legacy/....dylib

macos-10.15-amd64

TL Legacy/....dylib

macos-10.15-amd64

1

TL Legacy/....dylib

macos-10.15-amd64

TL Legacy/....dylib

macos-10.15-amd64

1

TL Legacy/....dylib

macos-10.15-amd64

4

TL Legacy/....dylib

macos-10.15-amd64

4

TL Legacy/....dylib

macos-10.15-amd64

TL Legacy/....dylib

macos-10.15-amd64

1

TL Legacy/....dylib

macos-10.15-amd64

TL Legacy/....dylib

macos-10.15-amd64

1

TL Legacy/....dylib

macos-10.15-amd64

Analysis

max time kernel
17s
max time network
32s
platform
macos-10.15_amd64
resource
macos-20240611-en
resource tags

arch:amd64arch:i386image:macos-20240611-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
08/07/2024, 20:25

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

TL_legacy.dmg

Resource

macos-20240611-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

TL Legacy/TL Legacy.app/Contents/MacOS/TL

Resource

macos-20240611-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

TL Legacy/TL Legacy.app/Contents/app/bootstrap.jar

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

TL Legacy/TL Legacy.app/Contents/app/bootstrap.jar

Resource

win10v2004-20240704-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

TL Legacy/TL Legacy.app/Contents/app/restart.sh

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

TL Legacy/TL Legacy.app/Contents/app/restart.sh

Resource

debian9-armhf-20240611-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

TL Legacy/TL Legacy.app/Contents/app/restart.sh

Resource

debian9-mipsbe-20240611-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

TL Legacy/TL Legacy.app/Contents/app/restart.sh

Resource

debian9-mipsel-20240611-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/Welcome.html

Resource

win7-20240708-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/Welcome.html

Resource

win10v2004-20240704-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral11

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/bin/java

Resource

macos-20240611-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/bin/jfr

Resource

macos-20240611-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/bin/jrunscript

Resource

macos-20240611-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/bin/keytool

Resource

macos-20240611-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/bin/rmiregistry

Resource

macos-20240611-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/jrt-fs.jar

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/jrt-fs.jar

Resource

win10v2004-20240708-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/jspawnhelper

Resource

macos-20240611-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libawt.dylib

Resource

macos-20240611-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libawt_lwawt.dylib

Resource

macos-20240611-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libdecora_sse.dylib

Resource

macos-20240611-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libdt_socket.dylib

Resource

macos-20240611-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libextnet.dylib

Resource

macos-20240611-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libfontmanager.dylib

Resource

macos-20240611-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libfreetype.dylib

Resource

macos-20240611-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libfxplugins.dylib

Resource

macos-20240611-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libglass.dylib

Resource

macos-20240611-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libglib-lite.dylib

Resource

macos-20240611-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libgstreamer-lite.dylib

Resource

macos-20240611-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libinstrument.dylib

Resource

macos-20240611-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libj2gss.dylib

Resource

macos-20240611-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libj2pcsc.dylib

Resource

macos-20240611-en

macos-10.15-amd64

1 signatures

150 seconds

Errors

Reason

Machine shutdown

Report Analysis Logs

General

Target

TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libdt_socket.dylib
Size

47KB
MD5

c7407350b428fc40f819eca37612f917
SHA1

6e5de8b78b86dec95b0b7fbfebbf0ad5855c2fb5
SHA256

a444d5ede55f80addcc4f68853bbd7080e84261b8a12c9970a0aeff59b73d980
SHA512

80ed97575835ad2f5046ed81b9647bbae677219d44463b45cf31fc42708ac0988d7d728d2af80117fd261e9fe8a8593a768b2b9c9e4b2967498c5c0b76258d2a
SSDEEP

384:jlVxj5asoXrexcSoRnzA/H3isiPEQgz/Zd4wUHmr+Q8Hrojryr54irNab8er:jlX5asoXrRzA/H3NtQgz/Hx8MZAab8

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libdt_socket.dylib\""
1⤵
PID:535

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libdt_socket.dylib\""
1⤵
PID:535

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libdt_socket.dylib"
1⤵
PID:535
- /bin/zsh
  /bin/zsh -c "/Users/run/TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libdt_socket.dylib"
  2⤵
  PID:536
- /Users/run/TL
  /Users/run/TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libdt_socket.dylib
  2⤵
  PID:536

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:538

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:538

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:539

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:539

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:540

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:540

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:544

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:544

/usr/libexec/xpcproxy
xpcproxy com.apple.nehelper
1⤵
PID:545

/usr/libexec/nehelper
/usr/libexec/nehelper
1⤵
PID:545

/usr/libexec/xpcproxy
xpcproxy com.apple.routined
1⤵
PID:555

/usr/libexec/routined
/usr/libexec/routined LAUNCHED_BY_LAUNCHD
1⤵
PID:555

/usr/libexec/xpcproxy
xpcproxy com.apple.Maps.mapspushd
1⤵
PID:556

/System/Library/CoreServices/mapspushd
/System/Library/CoreServices/mapspushd
1⤵
PID:556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy