Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

26/08/2023, 19:07

230826-xsvehaed9v 7

26/08/2023, 19:07

230826-xslscscf74 7

26/08/2023, 19:02

230826-xpv7maed8v 7

26/08/2023, 19:01

230826-xpevmsed8s 7

26/08/2023, 18:59

230826-xm74eacf59 7

26/08/2023, 18:55

230826-xlarhsed7t 7

Analysis

  • max time kernel
    128s
  • max time network
    136s
  • platform
    windows10-1703_x64
  • resource
    win10-20230703-en
  • resource tags

    arch:x64arch:x86image:win10-20230703-enlocale:en-usos:windows10-1703-x64system
  • submitted
    26/08/2023, 19:07

General

  • Target

    AtlasMenu/Launcher.exe

  • Size

    3.9MB

  • MD5

    d584177d5cc323e38cf83b84ca6a5892

  • SHA1

    9e99946c6297fd282e15656388c6b02b16d2d411

  • SHA256

    d67ef89bf353873771d073814192d2b63aff0df4aa683a84c60700a3301f0cc0

  • SHA512

    4a6407d54ff53660b426c69220fbf9c51e3a2e4701f7635a38b0e1c10ff53e3ff53fc63624eb3884ac55e09b092d6a53536cd85e0b2ef05604bbf028722df6e3

  • SSDEEP

    98304:kJamBeGILgwkjR5mXt67Yb04oCdlhsgT/R805MBn1T5:sxBefs3YA7HkJsgLe06Bnr

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\AtlasMenu\Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\AtlasMenu\Launcher.exe"
    1⤵
      PID:796

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/796-0-0x00007FF6E6070000-0x00007FF6E6A94000-memory.dmp

      Filesize

      10.1MB

    • memory/796-1-0x00007FF6E6070000-0x00007FF6E6A94000-memory.dmp

      Filesize

      10.1MB