Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
4Static
static
3Natro Macr...re.dll
macos-10.15-amd64
4Natro Macr...fe.dll
macos-10.15-amd64
1Natro Macr...er.dll
macos-10.15-amd64
1Natro Macr...ed.dll
macos-10.15-amd64
1Natro Macr...re.dll
macos-10.15-amd64
1Natro Macr...mo.dll
macos-10.15-amd64
1Natro Macr...ta.dll
macos-10.15-amd64
1Natro Macr...ay.dll
macos-10.15-amd64
1Natro Macr...na.dll
macos-10.15-amd64
1Natro Macr...ce.dll
macos-10.15-amd64
1Natro Macr...ts.dll
macos-10.15-amd64
1Natro Macr...us.dll
macos-10.15-amd64
1Natro Macr...n3.dll
macos-10.15-amd64
1Natro Macr...al.dll
macos-10.15-amd64
1Natro Macr...eo.dll
macos-10.15-amd64
1Natro Macr...NK.dll
macos-10.15-amd64
1Natro Macr...er.dll
macos-10.15-amd64
1Natro Macr...GV.dll
macos-10.15-amd64
1Natro Macr...se.dll
macos-10.15-amd64
1Natro Macr...AS.dll
macos-10.15-amd64
1Natro Macr...x3.dll
macos-10.15-amd64
1Natro Macr...mp.dll
macos-10.15-amd64
1Natro Macr...in.dll
macos-10.15-amd64
1Natro Macr...S7.dll
macos-10.15-amd64
1Natro Macr...ay.dll
macos-10.15-amd64
1Natro Macr...rk.dll
macos-10.15-amd64
1Natro Macr...32.exe
macos-10.15-amd64
1Natro Macr...64.exe
macos-10.15-amd64
1Natro Macr...or.vbs
macos-10.15-amd64
1Natro Macr...us.ps1
macos-10.15-amd64
1Natro Macr...und.js
macos-10.15-amd64
1Natro Macr...ro.vbs
macos-10.15-amd64
1Analysis
-
max time kernel
125s -
max time network
122s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
01/09/2024, 14:08
Static task
static1
Behavioral task
behavioral1
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Allure.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral2
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Ayofe.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral3
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/BluePaper.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral4
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Concaved.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral5
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Core.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral6
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Cosmo.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral7
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Fanta.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral8
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Graygray.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral9
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Hana.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral10
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Invoice.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral11
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Lakrits.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral12
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Luminous.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral13
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/MacLion3.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral14
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Minimal.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral15
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Museo.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral16
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/PINK.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral17
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Panther.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral18
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/PaperAGV.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral19
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Relapse.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral20
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/SNAS.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral21
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Simplex3.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral22
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Stomp.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral23
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/USkin.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral24
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/VS7.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral25
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/WhiteGray.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral26
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Woodwork.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral27
Sample
Natro Macro v1.0.0.2/submacros/AutoHotkey32.exe
Resource
macos-20240711.1-en
Behavioral task
behavioral28
Sample
Natro Macro v1.0.0.2/submacros/AutoHotkey64.exe
Resource
macos-20240711.1-en
Behavioral task
behavioral29
Sample
Natro Macro v1.0.0.2/submacros/StatMonitor.vbs
Resource
macos-20240711.1-en
Behavioral task
behavioral30
Sample
Natro Macro v1.0.0.2/submacros/Status.ps1
Resource
macos-20240711.1-en
Behavioral task
behavioral31
Sample
Natro Macro v1.0.0.2/submacros/background.js
Resource
macos-20240711.1-en
Behavioral task
behavioral32
Sample
Natro Macro v1.0.0.2/submacros/natro_macro.vbs
Resource
macos-20240711.1-en
General
-
Target
Natro Macro v1.0.0.2/nm_image_assets/Styles/PaperAGV.dll
-
Size
760KB
-
MD5
4282f85d33bd94735337abc9f4c9b2cb
-
SHA1
915ca749b0516177da908cfd70805f12b4191af5
-
SHA256
06b28b2cf51e71a63a43702aade8ead477c1f16fca156ca5fc9572e461b9488e
-
SHA512
41002eddd82a09910117589a0573b00498358aef6d093733f54b6be41e60e9f7fd99e8bca9f059e69599e6b46b695804a603e0b7532517251759a931ff327479
-
SSDEEP
12288:l1sGFguosNsGKImvhVsGw4OlpAajAEADe:lA8AEAy
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Natro Macro v1.0.0.2/nm_image_assets/Styles/PaperAGV.dll\""1⤵PID:502
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Natro Macro v1.0.0.2/nm_image_assets/Styles/PaperAGV.dll\""1⤵PID:502
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Natro Macro v1.0.0.2/nm_image_assets/Styles/PaperAGV.dll"1⤵PID:502
-
/bin/zsh/bin/zsh -c "/Users/run/Natro Macro v1.0.0.2/nm_image_assets/Styles/PaperAGV.dll"2⤵PID:503
-
-
/Users/run/Natro/Users/run/Natro Macro v1.0.0.2/nm_image_assets/Styles/PaperAGV.dll2⤵PID:503
-