Overview
overview
7Static
static
1TL_legacy.dmg
macos-10.15-amd64
1TL Legacy/...cOS/TL
macos-10.15-amd64
1TL Legacy/...ap.jar
windows7-x64
1TL Legacy/...ap.jar
windows10-2004-x64
7TL Legacy/...art.sh
ubuntu-18.04-amd64
3TL Legacy/...art.sh
debian-9-armhf
3TL Legacy/...art.sh
debian-9-mips
3TL Legacy/...art.sh
debian-9-mipsel
3TL Legacy/...e.html
windows7-x64
1TL Legacy/...e.html
windows10-2004-x64
1TL Legacy/...n/java
macos-10.15-amd64
1TL Legacy/...in/jfr
macos-10.15-amd64
4TL Legacy/...script
macos-10.15-amd64
4TL Legacy/...eytool
macos-10.15-amd64
1TL Legacy/...gistry
macos-10.15-amd64
TL Legacy/...fs.jar
windows7-x64
1TL Legacy/...fs.jar
windows10-2004-x64
1TL Legacy/...helper
macos-10.15-amd64
4TL Legacy/....dylib
macos-10.15-amd64
1TL Legacy/....dylib
macos-10.15-amd64
4TL Legacy/....dylib
macos-10.15-amd64
1TL Legacy/....dylib
macos-10.15-amd64
TL Legacy/....dylib
macos-10.15-amd64
1TL Legacy/....dylib
macos-10.15-amd64
TL Legacy/....dylib
macos-10.15-amd64
1TL Legacy/....dylib
macos-10.15-amd64
4TL Legacy/....dylib
macos-10.15-amd64
4TL Legacy/....dylib
macos-10.15-amd64
TL Legacy/....dylib
macos-10.15-amd64
1TL Legacy/....dylib
macos-10.15-amd64
TL Legacy/....dylib
macos-10.15-amd64
1TL Legacy/....dylib
macos-10.15-amd64
Analysis
-
max time kernel
27s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240611-en -
resource tags
arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
08/07/2024, 20:25
Static task
static1
Behavioral task
behavioral1
Sample
TL_legacy.dmg
Resource
macos-20240611-en
Behavioral task
behavioral2
Sample
TL Legacy/TL Legacy.app/Contents/MacOS/TL
Resource
macos-20240611-en
Behavioral task
behavioral3
Sample
TL Legacy/TL Legacy.app/Contents/app/bootstrap.jar
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
TL Legacy/TL Legacy.app/Contents/app/bootstrap.jar
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
TL Legacy/TL Legacy.app/Contents/app/restart.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral6
Sample
TL Legacy/TL Legacy.app/Contents/app/restart.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral7
Sample
TL Legacy/TL Legacy.app/Contents/app/restart.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral8
Sample
TL Legacy/TL Legacy.app/Contents/app/restart.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral9
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/Welcome.html
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/Welcome.html
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/bin/java
Resource
macos-20240611-en
Behavioral task
behavioral12
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/bin/jfr
Resource
macos-20240611-en
Behavioral task
behavioral13
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/bin/jrunscript
Resource
macos-20240611-en
Behavioral task
behavioral14
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/bin/keytool
Resource
macos-20240611-en
Behavioral task
behavioral15
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/bin/rmiregistry
Resource
macos-20240611-en
Behavioral task
behavioral16
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/jrt-fs.jar
Resource
win7-20240704-en
Behavioral task
behavioral17
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/jrt-fs.jar
Resource
win10v2004-20240708-en
Behavioral task
behavioral18
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/jspawnhelper
Resource
macos-20240611-en
Behavioral task
behavioral19
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libawt.dylib
Resource
macos-20240611-en
Behavioral task
behavioral20
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libawt_lwawt.dylib
Resource
macos-20240611-en
Behavioral task
behavioral21
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libdecora_sse.dylib
Resource
macos-20240611-en
Behavioral task
behavioral22
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libdt_socket.dylib
Resource
macos-20240611-en
Behavioral task
behavioral23
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libextnet.dylib
Resource
macos-20240611-en
Behavioral task
behavioral24
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libfontmanager.dylib
Resource
macos-20240611-en
Behavioral task
behavioral25
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libfreetype.dylib
Resource
macos-20240611-en
Behavioral task
behavioral26
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libfxplugins.dylib
Resource
macos-20240611-en
Behavioral task
behavioral27
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libglass.dylib
Resource
macos-20240611-en
Behavioral task
behavioral28
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libglib-lite.dylib
Resource
macos-20240611-en
Behavioral task
behavioral29
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libgstreamer-lite.dylib
Resource
macos-20240611-en
Behavioral task
behavioral30
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libinstrument.dylib
Resource
macos-20240611-en
Behavioral task
behavioral31
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libj2gss.dylib
Resource
macos-20240611-en
Behavioral task
behavioral32
Sample
TL Legacy/TL Legacy.app/Contents/runtime/Contents/Home/lib/libj2pcsc.dylib
Resource
macos-20240611-en
General
-
Target
TL Legacy/TL Legacy.app/Contents/app/restart.sh
-
Size
106B
-
MD5
5ffe4f0a568542463e585a5dda29fde5
-
SHA1
0faa1650edfd2c3daa85e1bf1ed17f4c1ceff7c9
-
SHA256
34d67cecca85ae3205771102f5dd8252110e05385baa2d3c9c497b84f279dd87
-
SHA512
f71babeee38e2de2927e74efd5f3be933720bb7af52989047064db54d7e3490aa44dadfe006f9d5f677a4edfa0f37ac68784f9914f461aaa72ada4b17bcb88c8
Malware Config
Signatures
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/self/fd/0 open