Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3Apes vs Helium.exe
windows7-x64
1Apes vs Helium.exe
windows10-2004-x64
1Apes vs He...ss.dll
windows7-x64
1Apes vs He...ss.dll
windows10-2004-x64
1Apes vs He...rp.dll
windows7-x64
1Apes vs He...rp.dll
windows10-2004-x64
1Apes vs He...ts.dll
windows7-x64
1Apes vs He...ts.dll
windows10-2004-x64
1Apes vs He...mo.dll
windows7-x64
1Apes vs He...mo.dll
windows10-2004-x64
1Apes vs He...me.dll
windows7-x64
1Apes vs He...me.dll
windows10-2004-x64
1Apes vs He...en.dll
windows7-x64
1Apes vs He...en.dll
windows10-2004-x64
1Apes vs He...ix.dll
windows7-x64
1Apes vs He...ix.dll
windows10-2004-x64
1Apes vs He...ty.dll
windows7-x64
1Apes vs He...ty.dll
windows10-2004-x64
1Apes vs He...on.dll
windows7-x64
1Apes vs He...on.dll
windows10-2004-x64
1Apes vs He...on.dll
windows7-x64
1Apes vs He...on.dll
windows10-2004-x64
1Apes vs He...re.dll
windows7-x64
1Apes vs He...re.dll
windows10-2004-x64
1Apes vs He...me.dll
windows7-x64
1Apes vs He...me.dll
windows10-2004-x64
1Apes vs He...ty.dll
windows7-x64
1Apes vs He...ty.dll
windows10-2004-x64
1Apes vs He...ml.dll
windows7-x64
1Apes vs He...ml.dll
windows10-2004-x64
1Apes vs He...em.dll
windows7-x64
1Apes vs He...em.dll
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 13:52
Static task
static1
Behavioral task
behavioral1
Sample
Apes vs Helium.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Apes vs Helium.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Apes vs Helium_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
Apes vs Helium_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Apes vs Helium_Data/Managed/Assembly-CSharp.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
Apes vs Helium_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Apes vs Helium_Data/Managed/Boxophobic.Utils.Scripts.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Apes vs Helium_Data/Managed/Boxophobic.Utils.Scripts.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Apes vs Helium_Data/Managed/CFXRDemo.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Apes vs Helium_Data/Managed/CFXRDemo.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Apes vs Helium_Data/Managed/CFXRRuntime.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Apes vs Helium_Data/Managed/CFXRRuntime.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Apes vs Helium_Data/Managed/DOTween.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Apes vs Helium_Data/Managed/DOTween.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
Apes vs Helium_Data/Managed/Mono.Posix.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
Apes vs Helium_Data/Managed/Mono.Posix.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Apes vs Helium_Data/Managed/Mono.Security.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Apes vs Helium_Data/Managed/Mono.Security.dll
Resource
win10v2004-20240319-en
Behavioral task
behavioral19
Sample
Apes vs Helium_Data/Managed/System.ComponentModel.Composition.dll
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
Apes vs Helium_Data/Managed/System.ComponentModel.Composition.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Apes vs Helium_Data/Managed/System.Configuration.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Apes vs Helium_Data/Managed/System.Configuration.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Apes vs Helium_Data/Managed/System.Core.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Apes vs Helium_Data/Managed/System.Core.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
Apes vs Helium_Data/Managed/System.Runtime.dll
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
Apes vs Helium_Data/Managed/System.Runtime.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
Apes vs Helium_Data/Managed/System.Security.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
Apes vs Helium_Data/Managed/System.Security.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
Apes vs Helium_Data/Managed/System.Xml.dll
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
Apes vs Helium_Data/Managed/System.Xml.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
Apes vs Helium_Data/Managed/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Apes vs Helium_Data/Managed/System.dll
Resource
win10v2004-20240226-en
General
-
Target
Apes vs Helium.exe
-
Size
635KB
-
MD5
69f6c00b52ec50a584cdad51fa00fb97
-
SHA1
acf8f1f802354f156639efe302309a55d6d82b6d
-
SHA256
9495f76f38ebef081aef0a47bf185bdb7367d277345634a1306ee090aca2250d
-
SHA512
3bb8f8e9a017a6af2a9cb25eca8e355d6b1c5d0430c6cb27bd1c9b3ecc82077bcaa6717d1f9cfd019117c4cf1a7d819a8b9afb4278936d04c1525252beda7036
-
SSDEEP
6144:2/7oYfSHQPWTUg4kbBT9Y4CjRvHHHHgHHHHg:c7qTUUbBT+4CxHHHHgHHHHg
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1992 Apes vs Helium.exe 1992 Apes vs Helium.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1992 wrote to memory of 2296 1992 Apes vs Helium.exe 28 PID 1992 wrote to memory of 2296 1992 Apes vs Helium.exe 28 PID 1992 wrote to memory of 2296 1992 Apes vs Helium.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\Apes vs Helium.exe"C:\Users\Admin\AppData\Local\Temp\Apes vs Helium.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1992 -
C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe"C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe" --attach 1992 30842882⤵PID:2296
-