Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10NanoCore 1...22.rar
windows7-x64
3NanoCore 1...22.rar
windows10-2004-x64
3NanoCore 1...in.xml
windows7-x64
3NanoCore 1...in.xml
windows10-2004-x64
1NanoCore 1...sqlite
windows7-x64
3NanoCore 1...sqlite
windows10-2004-x64
3NanoCore 1...sqlite
windows7-x64
3NanoCore 1...sqlite
windows10-2004-x64
3NanoCore 1...sqlite
windows7-x64
3NanoCore 1...sqlite
windows10-2004-x64
3NanoCore 1...IO.ncp
windows7-x64
3NanoCore 1...IO.ncp
windows10-2004-x64
3NanoCore 1...in.ncp
windows7-x64
3NanoCore 1...in.ncp
windows10-2004-x64
3NanoCore 1...in.ncp
windows7-x64
3NanoCore 1...in.ncp
windows10-2004-x64
3NanoCore 1...ls.ncp
windows7-x64
3NanoCore 1...ls.ncp
windows10-2004-x64
3NanoCore 1...ck.ncp
windows7-x64
3NanoCore 1...ck.ncp
windows10-2004-x64
3NanoCore 1...ss.ncp
windows7-x64
3NanoCore 1...ss.ncp
windows10-2004-x64
3NanoCore 1...in.ncp
windows7-x64
3NanoCore 1...in.ncp
windows10-2004-x64
3NanoCore 1...in.ncp
windows7-x64
3NanoCore 1...in.ncp
windows10-2004-x64
3NanoCore 1...in.ncp
windows7-x64
3NanoCore 1...in.ncp
windows10-2004-x64
3NanoCore 1...in.ncp
windows7-x64
3NanoCore 1...in.ncp
windows10-2004-x64
3NanoCore 1...ra.wav
windows7-x64
1NanoCore 1...ra.wav
windows10-2004-x64
6Analysis
-
max time kernel
93s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
07/09/2024, 13:39
Behavioral task
behavioral1
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222.rar
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/ClientPlugin.xml
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/ClientPlugin.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Databases/core.sqlite
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Databases/core.sqlite
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Databases/geolocation.sqlite
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Databases/geolocation.sqlite
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Databases/network.sqlite
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Databases/network.sqlite
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/AIO.ncp
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/AIO.ncp
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/CorePlugin.ncp
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/CorePlugin.ncp
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/DucPlugin.ncp
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/DucPlugin.ncp
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/MiscTools.ncp
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/MiscTools.ncp
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NanoBlack.ncp
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NanoBlack.ncp
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NanoCoreSwiss.ncp
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NanoCoreSwiss.ncp
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NanoProtectPlugin.ncp
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NanoProtectPlugin.ncp
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NetworkPlugin.ncp
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NetworkPlugin.ncp
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/SurveillanceExPlugin.ncp
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/SurveillanceExPlugin.ncp
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/ToolsPlugin.ncp
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/ToolsPlugin.ncp
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/Audio/camera.wav
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/Audio/camera.wav
Resource
win10v2004-20240802-en
General
-
Target
NanoCore 1.2.2.0_Cracked By Alcatraz3222/ClientPlugin.xml
-
Size
9KB
-
MD5
5d0381a56563b1ca8928e3cf087f1625
-
SHA1
9c9f15ec3bf3f91fae6f327df558d335f790ce3b
-
SHA256
0497b92461c2a9ce3101d9397fb3079f60979164336a16653d282273d3085bcc
-
SHA512
594de3e1313255902524d11b3d7a89d35b2db2713d01f7e725cecc5959227f18ca856059932b809be420bebd478199d48303a71b66fc3e48d835dcac133d3d04
-
SSDEEP
192:E5cL6liTydwvbFO+y2dbEBhVR6SHaP0sJjpCZUV1:ocLBeKw+y/BfASHo0uF7j
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\NanoCore 1.2.2.0_Cracked By Alcatraz3222\ClientPlugin.xml"1⤵PID:2104