Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 13:52

General

  • Target

    Apes vs Helium.exe

  • Size

    635KB

  • MD5

    69f6c00b52ec50a584cdad51fa00fb97

  • SHA1

    acf8f1f802354f156639efe302309a55d6d82b6d

  • SHA256

    9495f76f38ebef081aef0a47bf185bdb7367d277345634a1306ee090aca2250d

  • SHA512

    3bb8f8e9a017a6af2a9cb25eca8e355d6b1c5d0430c6cb27bd1c9b3ecc82077bcaa6717d1f9cfd019117c4cf1a7d819a8b9afb4278936d04c1525252beda7036

  • SSDEEP

    6144:2/7oYfSHQPWTUg4kbBT9Y4CjRvHHHHgHHHHg:c7qTUUbBT+4CxHHHHgHHHHg

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Apes vs Helium.exe
    "C:\Users\Admin\AppData\Local\Temp\Apes vs Helium.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1992
    • C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe
      "C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe" --attach 1992 3084288
      2⤵
        PID:2296

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1992-1-0x0000000000320000-0x0000000000330000-memory.dmp

      Filesize

      64KB

    • memory/1992-0-0x0000000000600000-0x0000000000610000-memory.dmp

      Filesize

      64KB

    • memory/1992-3-0x0000000062750000-0x0000000062760000-memory.dmp

      Filesize

      64KB

    • memory/1992-2-0x0000000062740000-0x0000000062750000-memory.dmp

      Filesize

      64KB

    • memory/1992-14-0x000007FFFFEC0000-0x000007FFFFED0000-memory.dmp

      Filesize

      64KB

    • memory/1992-18-0x0000000062D50000-0x0000000062D60000-memory.dmp

      Filesize

      64KB

    • memory/1992-16-0x0000000062D30000-0x0000000062D40000-memory.dmp

      Filesize

      64KB

    • memory/1992-24-0x0000000062D60000-0x0000000062D70000-memory.dmp

      Filesize

      64KB

    • memory/1992-25-0x0000000062D70000-0x0000000062D80000-memory.dmp

      Filesize

      64KB

    • memory/1992-30-0x00000000630E0000-0x0000000063100000-memory.dmp

      Filesize

      128KB

    • memory/1992-31-0x0000000062FD0000-0x0000000062FE0000-memory.dmp

      Filesize

      64KB

    • memory/1992-29-0x0000000062FC0000-0x0000000062FD0000-memory.dmp

      Filesize

      64KB

    • memory/1992-28-0x0000000062740000-0x0000000062750000-memory.dmp

      Filesize

      64KB

    • memory/1992-27-0x0000000000320000-0x0000000000330000-memory.dmp

      Filesize

      64KB

    • memory/1992-26-0x0000000000600000-0x0000000000610000-memory.dmp

      Filesize

      64KB

    • memory/1992-33-0x0000000062D30000-0x0000000062D40000-memory.dmp

      Filesize

      64KB

    • memory/1992-32-0x0000000062750000-0x0000000062760000-memory.dmp

      Filesize

      64KB

    • memory/1992-34-0x0000000063240000-0x0000000063250000-memory.dmp

      Filesize

      64KB

    • memory/1992-36-0x0000000063610000-0x0000000063620000-memory.dmp

      Filesize

      64KB

    • memory/1992-40-0x0000000062D50000-0x0000000062D60000-memory.dmp

      Filesize

      64KB

    • memory/1992-41-0x0000000063350000-0x0000000063360000-memory.dmp

      Filesize

      64KB

    • memory/1992-42-0x0000000063910000-0x0000000063920000-memory.dmp

      Filesize

      64KB

    • memory/1992-43-0x0000000063920000-0x0000000063930000-memory.dmp

      Filesize

      64KB

    • memory/1992-51-0x000007FFFFEB0000-0x000007FFFFEC0000-memory.dmp

      Filesize

      64KB

    • memory/1992-55-0x0000000063930000-0x0000000063940000-memory.dmp

      Filesize

      64KB

    • memory/1992-50-0x0000000062D60000-0x0000000062D70000-memory.dmp

      Filesize

      64KB

    • memory/1992-49-0x0000000063A60000-0x0000000063A70000-memory.dmp

      Filesize

      64KB

    • memory/1992-44-0x0000000063A40000-0x0000000063A50000-memory.dmp

      Filesize

      64KB

    • memory/1992-68-0x000007FFFFEA0000-0x000007FFFFEB0000-memory.dmp

      Filesize

      64KB

    • memory/1992-84-0x0000000062D70000-0x0000000062D80000-memory.dmp

      Filesize

      64KB

    • memory/1992-86-0x000007FFFFE50000-0x000007FFFFE60000-memory.dmp

      Filesize

      64KB

    • memory/1992-95-0x000007FFFFE60000-0x000007FFFFE70000-memory.dmp

      Filesize

      64KB

    • memory/1992-113-0x000007FFFFE40000-0x000007FFFFE50000-memory.dmp

      Filesize

      64KB

    • memory/1992-120-0x000007FFFFE10000-0x000007FFFFE20000-memory.dmp

      Filesize

      64KB

    • memory/1992-140-0x00000000630E0000-0x0000000063100000-memory.dmp

      Filesize

      128KB

    • memory/1992-139-0x0000000062FC0000-0x0000000062FD0000-memory.dmp

      Filesize

      64KB

    • memory/1992-141-0x0000000062FD0000-0x0000000062FE0000-memory.dmp

      Filesize

      64KB

    • memory/1992-142-0x0000000063240000-0x0000000063250000-memory.dmp

      Filesize

      64KB

    • memory/1992-143-0x0000000063610000-0x0000000063620000-memory.dmp

      Filesize

      64KB

    • memory/1992-144-0x0000000063350000-0x0000000063360000-memory.dmp

      Filesize

      64KB

    • memory/1992-145-0x0000000063910000-0x0000000063920000-memory.dmp

      Filesize

      64KB

    • memory/1992-146-0x0000000063920000-0x0000000063930000-memory.dmp

      Filesize

      64KB