Analysis
-
max time kernel
119s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
25-11-2024 20:50
Static task
static1
Behavioral task
behavioral1
Sample
TheAltening.exe
Resource
win7-20240903-en
General
-
Target
TheAltening.exe
-
Size
120.8MB
-
MD5
29689fef5edf0357ca6a07dffc7a71ea
-
SHA1
8855b2d203833744323bd7b0cc7a8894998607d7
-
SHA256
31c4ab99ebb574c221aa795161b959fed11a0e6908bf64385944873f293c5253
-
SHA512
6c90ab9c0aecaffd966a722f290e5c9cc83b51b3da54bc247275debeecc8d8a028b2f9e4bcd182b832e1af1057de5c0d38b815f23e1a6716e76025d0a371bdd0
-
SSDEEP
786432:uQ/HMKcIK3l8vVwEgNRajudstuB+chCkZ9xKX65/wfejMVJu:T/vvKepgmq2tuB+chCE9EQ1
Malware Config
Signatures
-
Loads dropped DLL 5 IoCs
pid Process 1076 TheAltening.exe 1076 TheAltening.exe 1076 TheAltening.exe 1076 TheAltening.exe 1076 TheAltening.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
\Users\Admin\AppData\Local\Temp\.net\TheAltening\hOHr51s9Bz0M1wb5lZYsR6q9KnUsh1I=\D3DCompiler_47_cor3.dll
Filesize4.7MB
MD5c4974c924b605bd322c4872d72de90d1
SHA120df9433eab24d3291696046646f493794b77cba
SHA25671d766b4742ca9f7422bb2efc3dc03f2cee509a5a43d241e748cda7aaac24bf4
SHA5123889648dbb4608ece9c68f1cd5b1601da5b795eade7910764dd4769090cdb209a39acf3986e6e7190745f3bc6b1477a52dfaccb96a7e799eafc0825e2c44a846
-
\Users\Admin\AppData\Local\Temp\.net\TheAltening\hOHr51s9Bz0M1wb5lZYsR6q9KnUsh1I=\PresentationNative_cor3.dll
Filesize1.2MB
MD58e874bb782193fa45d027254e7d03244
SHA1024ccc78d1d23050164e8cfdf141c921f42e0c74
SHA256f75f98fbbb02dad69bcd8c69ec26eb3705dbd95dad996b58308b50e6c9904246
SHA5123f3b0f93e5600c0671688317ee00d7a88411b80b7c4aa383d274af318782a66665409a528d484409bfe598c309ed54480c86a4d4e109dee5265351d5902d0c56
-
Filesize
1.2MB
MD5b2eb7b51bd58201cf498e83846e90110
SHA1ca439759b5c5162e626d2b84ab55b93adc552e06
SHA256180557694842854789457a872df849b2130098a9c2bfd70d201f77bec6f9fddb
SHA5121a92064b3417b287246fadd88fea9138dfcc659283e063aab9305e424feac0d1b2c216be5f65ce7a95f0322ab3849478892ae407399aa6029a504c4c8a5884da
-
Filesize
5.0MB
MD51c434dc8cb09095640c776385ba69691
SHA197fe8e25bebfb7d790768175a4625d07f3d4abfd
SHA2563b3558c408c57be332c9595624f6d49413fe0dd43d3d5fa4626041851f77216a
SHA5124bdb7c0e8571422927fbc8eec6d05959915748acce035fef336b32381922a0a54f029f959fb66cb96a89a024c11e2b94ee6948f618dd04d9ae87cc83f3f83ec8
-
Filesize
1.9MB
MD50c0be30d77de3f65e1c990b7d99143da
SHA1fd9a4e456f56308d5bed48e7049de64e88a73833
SHA25612a8b75ceecb6c5ce8ce81ad064aaf2bcb09d6338e5e03a7eddc57acd58e2a7d
SHA5129a2a6acad9b21c3f093d4d72289f32ca6ebaee304c9a9e3ec9319558919452c3b2f23ea5e72c06c9af7a2a1ded0ce266e45f4fb9113d2bb3897320fcbdf7ebad