Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
4Static
static
3Natro Macr...re.dll
macos-10.15-amd64
4Natro Macr...fe.dll
macos-10.15-amd64
1Natro Macr...er.dll
macos-10.15-amd64
1Natro Macr...ed.dll
macos-10.15-amd64
1Natro Macr...re.dll
macos-10.15-amd64
1Natro Macr...mo.dll
macos-10.15-amd64
1Natro Macr...ta.dll
macos-10.15-amd64
1Natro Macr...ay.dll
macos-10.15-amd64
1Natro Macr...na.dll
macos-10.15-amd64
1Natro Macr...ce.dll
macos-10.15-amd64
1Natro Macr...ts.dll
macos-10.15-amd64
1Natro Macr...us.dll
macos-10.15-amd64
1Natro Macr...n3.dll
macos-10.15-amd64
1Natro Macr...al.dll
macos-10.15-amd64
1Natro Macr...eo.dll
macos-10.15-amd64
1Natro Macr...NK.dll
macos-10.15-amd64
1Natro Macr...er.dll
macos-10.15-amd64
1Natro Macr...GV.dll
macos-10.15-amd64
1Natro Macr...se.dll
macos-10.15-amd64
1Natro Macr...AS.dll
macos-10.15-amd64
1Natro Macr...x3.dll
macos-10.15-amd64
1Natro Macr...mp.dll
macos-10.15-amd64
1Natro Macr...in.dll
macos-10.15-amd64
1Natro Macr...S7.dll
macos-10.15-amd64
1Natro Macr...ay.dll
macos-10.15-amd64
1Natro Macr...rk.dll
macos-10.15-amd64
1Natro Macr...32.exe
macos-10.15-amd64
1Natro Macr...64.exe
macos-10.15-amd64
1Natro Macr...or.vbs
macos-10.15-amd64
1Natro Macr...us.ps1
macos-10.15-amd64
1Natro Macr...und.js
macos-10.15-amd64
1Natro Macr...ro.vbs
macos-10.15-amd64
1Analysis
-
max time kernel
133s -
max time network
124s -
platform
macos-10.15_amd64 -
resource
macos-20240711.1-en -
resource tags
arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
01/09/2024, 14:08
Static task
static1
Behavioral task
behavioral1
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Allure.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral2
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Ayofe.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral3
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/BluePaper.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral4
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Concaved.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral5
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Core.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral6
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Cosmo.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral7
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Fanta.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral8
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Graygray.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral9
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Hana.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral10
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Invoice.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral11
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Lakrits.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral12
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Luminous.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral13
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/MacLion3.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral14
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Minimal.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral15
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Museo.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral16
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/PINK.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral17
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Panther.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral18
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/PaperAGV.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral19
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Relapse.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral20
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/SNAS.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral21
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Simplex3.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral22
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Stomp.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral23
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/USkin.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral24
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/VS7.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral25
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/WhiteGray.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral26
Sample
Natro Macro v1.0.0.2/nm_image_assets/Styles/Woodwork.dll
Resource
macos-20240711.1-en
Behavioral task
behavioral27
Sample
Natro Macro v1.0.0.2/submacros/AutoHotkey32.exe
Resource
macos-20240711.1-en
Behavioral task
behavioral28
Sample
Natro Macro v1.0.0.2/submacros/AutoHotkey64.exe
Resource
macos-20240711.1-en
Behavioral task
behavioral29
Sample
Natro Macro v1.0.0.2/submacros/StatMonitor.vbs
Resource
macos-20240711.1-en
Behavioral task
behavioral30
Sample
Natro Macro v1.0.0.2/submacros/Status.ps1
Resource
macos-20240711.1-en
Behavioral task
behavioral31
Sample
Natro Macro v1.0.0.2/submacros/background.js
Resource
macos-20240711.1-en
Behavioral task
behavioral32
Sample
Natro Macro v1.0.0.2/submacros/natro_macro.vbs
Resource
macos-20240711.1-en
General
-
Target
Natro Macro v1.0.0.2/submacros/background.js
-
Size
17KB
-
MD5
2e075aa52d8a51eae42d3c6706d22563
-
SHA1
f284a98cddc16911d4eac25893645ae5b263a7d2
-
SHA256
730360ce0cd624e74e54bc534a1b95429265efd1bc0dae7a5797245d1b7e9774
-
SHA512
e77157c283b2c3aa8dbe239df7e96673730ec91b45193acb997ea1f267c356ba78681252bdd099777e29f7360343fb3fefd137437c2a15cfdb51ebf8b64b3420
-
SSDEEP
384:yWVTmb8p9H2Gv+DS2u324T44S4v8Bq9Ag16deujMi:yWhmISu2uG4TTRv8Bq9V60G
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Natro Macro v1.0.0.2/submacros/background.js\""1⤵PID:515
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Natro Macro v1.0.0.2/submacros/background.js\""1⤵PID:515
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Natro Macro v1.0.0.2/submacros/background.js"1⤵PID:515
-
/bin/zsh/bin/zsh -c "/Users/run/Natro Macro v1.0.0.2/submacros/background.js"2⤵PID:516
-
-
/Users/run/Natro/Users/run/Natro Macro v1.0.0.2/submacros/background.js2⤵PID:516
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:517
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:517
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:520
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:520
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:543
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:544
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:545
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:545