Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

14/07/2024, 10:57

240714-m2nyzazeqf 3

14/07/2024, 10:53

240714-my7lxaxcrp 3

Analysis

  • max time kernel
    367s
  • max time network
    1803s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    14/07/2024, 10:53

General

  • Target

    Natro_Macro_v1.0.0.1a/submacros/PlanterTimers.ahk

  • Size

    37KB

  • MD5

    c12b71443e16c35ca364bc0f5d8bd800

  • SHA1

    2261bc8e1bfdc35070254bd505979c8cb282f647

  • SHA256

    117445783c404cf31aa3dc12b74794ff74fc76492311af91ad0c91dcc0c3ebc2

  • SHA512

    d2a11019a823274eb8a8646683409eaed07a6ba85152b66d94e51ddaaf50996681d48ed99e5d35a0d114191fc3113c47c2275c68bf9eeeb0a6400fefe5513ee9

  • SSDEEP

    384:vKq3dxsrAhx8l6MLMga4RC1QXdXpfcPrQm0sqHsvVMxMtej9CqT6gXJBsCEETbiA:CqP38l6MLMga4RBVpQyeMWtE/TeA

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Natro_Macro_v1.0.0.1a/submacros/PlanterTimers.ahk\""
    1⤵
      PID:498
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Natro_Macro_v1.0.0.1a/submacros/PlanterTimers.ahk\""
      1⤵
        PID:498
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/Natro_Macro_v1.0.0.1a/submacros/PlanterTimers.ahk
        1⤵
          PID:498
          • /bin/zsh
            /bin/zsh -c /Users/run/Natro_Macro_v1.0.0.1a/submacros/PlanterTimers.ahk
            2⤵
              PID:499
            • /Users/run/Natro_Macro_v1.0.0.1a/submacros/PlanterTimers.ahk
              /Users/run/Natro_Macro_v1.0.0.1a/submacros/PlanterTimers.ahk
              2⤵
                PID:499
              • /bin/sh
                sh /Users/run/Natro_Macro_v1.0.0.1a/submacros/PlanterTimers.ahk
                2⤵
                  PID:499
                • /bin/bash
                  sh /Users/run/Natro_Macro_v1.0.0.1a/submacros/PlanterTimers.ahk
                  2⤵
                    PID:499
                    • /*
                      "/* "
                      3⤵
                        PID:500
                  • /usr/libexec/xpcproxy
                    xpcproxy com.apple.newsyslog
                    1⤵
                      PID:536
                    • /usr/sbin/newsyslog
                      /usr/sbin/newsyslog
                      1⤵
                        PID:536
                      • /usr/libexec/xpcproxy
                        xpcproxy com.apple.spindump
                        1⤵
                          PID:538
                        • /usr/sbin/spindump
                          /usr/sbin/spindump
                          1⤵
                            PID:538
                          • /usr/libexec/xpcproxy
                            xpcproxy com.apple.diagnosticd
                            1⤵
                              PID:539
                            • /usr/libexec/diagnosticd
                              /usr/libexec/diagnosticd
                              1⤵
                                PID:539

                              Network

                              MITRE ATT&CK Matrix

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads