Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2s -
max time network
0s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
26/01/2025, 00:11
Behavioral task
behavioral1
Sample
Cracked Alantis.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Cracked Alantis.exe
Resource
win10v2004-20241007-en
General
-
Target
Cracked Alantis.exe
-
Size
7.6MB
-
MD5
458b3d5fcd051179953731d43d2a2d4e
-
SHA1
08ac1c70f44455a09c23ce66f8df71a461b87108
-
SHA256
d543385a2d3b345337bbb7bf91feadafddf6ac720ce0a606c1008b7307fbe957
-
SHA512
b68ac316f384becdcdf18427cef7d7fba068fad7ec38bf98e88b26333096ab97ed3716300f2908e0a8a9aafa17a86cf9228397ab2db4d203560ddcb9132445de
-
SSDEEP
196608:KJgFTewfI9jUC2gYBYv3vbWY+iITm1U6fd1EE:lFTVIH2gYBgDW/TOzbH
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2236 Cracked Alantis.exe -
resource yara_rule behavioral1/files/0x0006000000019023-21.dat upx behavioral1/memory/2236-23-0x000007FEF60C0000-0x000007FEF6785000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1924 wrote to memory of 2236 1924 Cracked Alantis.exe 30 PID 1924 wrote to memory of 2236 1924 Cracked Alantis.exe 30 PID 1924 wrote to memory of 2236 1924 Cracked Alantis.exe 30
Processes
-
C:\Users\Admin\AppData\Local\Temp\Cracked Alantis.exe"C:\Users\Admin\AppData\Local\Temp\Cracked Alantis.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1924 -
C:\Users\Admin\AppData\Local\Temp\Cracked Alantis.exe"C:\Users\Admin\AppData\Local\Temp\Cracked Alantis.exe"2⤵
- Loads dropped DLL
PID:2236
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
MD56f7c42579f6c2b45fe866747127aef09
SHA1b9487372fe3ed61022e52cc8dbd37e6640e87723
SHA25607642b6a3d99ce88cff790087ac4e2ba0b2da1100cf1897f36e096427b580ee5
SHA512aadf06fd6b4e14f600b0a614001b8c31e42d71801adec7c9c177dcbb4956e27617fa45ba477260a7e06d2ca4979ed5acc60311258427ee085e8025b61452acec