Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

Natro_Macr....1.zip

macos-10.15-amd64

1

Natro_Macr...re.dll

macos-10.15-amd64

1

Natro_Macr...fe.dll

macos-10.15-amd64

1

Natro_Macr...er.dll

macos-10.15-amd64

1

Natro_Macr...ed.dll

macos-10.15-amd64

1

Natro_Macr...re.dll

macos-10.15-amd64

1

Natro_Macr...mo.dll

macos-10.15-amd64

1

Natro_Macr...ta.dll

macos-10.15-amd64

1

Natro_Macr...ay.dll

macos-10.15-amd64

1

Natro_Macr...na.dll

macos-10.15-amd64

1

Natro_Macr...ce.dll

macos-10.15-amd64

1

Natro_Macr...ts.dll

macos-10.15-amd64

1

Natro_Macr...us.dll

macos-10.15-amd64

1

Natro_Macr...n3.dll

macos-10.15-amd64

1

Natro_Macr...al.dll

macos-10.15-amd64

1

Natro_Macr...eo.dll

macos-10.15-amd64

1

Natro_Macr...NK.dll

macos-10.15-amd64

1

Natro_Macr...el.png

macos-10.15-amd64

1

Natro_Macr...l2.png

macos-10.15-amd64

1

Natro_Macr...l2.png

macos-10.15-amd64

1

Natro_Macr...ct.png

macos-10.15-amd64

1

Natro_Macr...ry.png

macos-10.15-amd64

1

Natro_Macr...te.png

macos-10.15-amd64

1

Natro_Macr...us.png

macos-10.15-amd64

1

Natro_Macr...ow.png

macos-10.15-amd64

1

Natro_Macr...ee.png

macos-10.15-amd64

1

Natro_Macr...th.png

macos-10.15-amd64

1

Natro_Macr...es.png

macos-10.15-amd64

1

Natro_Macr...en.png

macos-10.15-amd64

1

Natro_Macr...at.ahk

macos-10.15-amd64

1

Natro_Macr...rs.ahk

macos-10.15-amd64

1

Natro_Macr...te.wsf

macos-10.15-amd64

1

Resubmissions

14/07/2024, 10:57

240714-m2nyzazeqf 3

14/07/2024, 10:53

240714-my7lxaxcrp 3

Analysis

  • max time kernel
    165s
  • max time network
    171s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    14/07/2024, 10:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Natro_Macro_v1.0.0.1.zip

  • Size

    6.9MB

  • MD5

    4f32d2e2ea54c71524e3f2c77a92c91d

  • SHA1

    a863c33cca3b3c2cf6cefa18a599ae9989f06d84

  • SHA256

    2da12b9469f2f6dfd0f0ded1dd9978d36e081bebee7e01d10b16b81492c0241d

  • SHA512

    690eb146832fb174a3e0a69c1cf0919c72331b1fec7791c23c4f037fb1916c520b7c954a64e847765eea4db7ac506790db3f36c24eafada174a268e4f2232374

  • SSDEEP

    196608:vDnUR3R26Ghs3T3cN5q8DSt4aZQyPWnzkDQMxYBE1AydMPJ3o:r43RohsbJOQPozklGwAyixo

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Natro_Macro_v1.0.0.1.zip\""
    1⤵
      PID:482
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Natro_Macro_v1.0.0.1.zip\""
      1⤵
        PID:482
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/Natro_Macro_v1.0.0.1.zip
        1⤵
          PID:482
          • /bin/zsh
            /bin/zsh -c /Users/run/Natro_Macro_v1.0.0.1.zip
            2⤵
              PID:484
            • /Users/run/Natro_Macro_v1.0.0.1.zip
              /Users/run/Natro_Macro_v1.0.0.1.zip
              2⤵
                PID:484
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.Terminal.2100
              1⤵
                PID:521
              • /System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal
                /System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal
                1⤵
                  PID:521
                  • /usr/bin/login
                    login -pf run
                    2⤵
                      PID:522
                      • /bin/zsh
                        -zsh
                        3⤵
                          PID:523
                          • /usr/libexec/path_helper
                            /usr/libexec/path_helper -s
                            4⤵
                              PID:524
                            • /usr/bin/locale
                              locale LC_CTYPE
                              4⤵
                                PID:525
                              • /usr/bin/sudo
                                sudo find / -n Natro
                                4⤵
                                  PID:532
                                • /usr/bin/find
                                  find / -n Natro
                                  4⤵
                                    PID:533
                                  • /usr/bin/find
                                    find / -amen Natro
                                    4⤵
                                      PID:534
                                    • /usr/bin/find
                                      find / -name Natro
                                      4⤵
                                        PID:536
                                • /usr/libexec/xpcproxy
                                  xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
                                  1⤵
                                    PID:530
                                  • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                    /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                    1⤵
                                      PID:530
                                    • /bin/launchctl
                                      /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
                                      1⤵
                                        PID:537
                                      • /bin/launchctl
                                        /bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
                                        1⤵
                                          PID:538

                                        Network

                                        MITRE ATT&CK Matrix

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads