Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3rmaildxp_v...ll.exe
windows7-x64
7rmaildxp_v...ll.exe
windows10-2004-x64
7$_14326_/$...st.exe
windows7-x64
3$_14326_/$...st.exe
windows10-2004-x64
3$_14326_/B...er.exe
windows7-x64
3$_14326_/B...er.exe
windows10-2004-x64
3$_14326_/H...x.html
windows7-x64
3$_14326_/H...x.html
windows10-2004-x64
1$_14326_/H...d.html
windows7-x64
3$_14326_/H...d.html
windows10-2004-x64
3$_14326_/H...0.html
windows7-x64
3$_14326_/H...0.html
windows10-2004-x64
3$_14326_/H...1.html
windows7-x64
3$_14326_/H...1.html
windows10-2004-x64
3$_14326_/H...0.html
windows7-x64
3$_14326_/H...0.html
windows10-2004-x64
3$_14326_/H...1.html
windows7-x64
3$_14326_/H...1.html
windows10-2004-x64
3$_14326_/H...2.html
windows7-x64
3$_14326_/H...2.html
windows10-2004-x64
1$_14326_/H...3.html
windows7-x64
3$_14326_/H...3.html
windows10-2004-x64
3$_14326_/H...4.html
windows7-x64
3$_14326_/H...4.html
windows10-2004-x64
3$_14326_/H...5.html
windows7-x64
3$_14326_/H...5.html
windows10-2004-x64
3$_14326_/H...2.html
windows7-x64
3$_14326_/H...2.html
windows10-2004-x64
3$_14326_/H...3.html
windows7-x64
3$_14326_/H...3.html
windows10-2004-x64
3$_14326_/H...4.html
windows7-x64
3$_14326_/H...4.html
windows10-2004-x64
3Analysis
-
max time kernel
140s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
21/08/2024, 12:10
Static task
static1
Behavioral task
behavioral1
Sample
rmaildxp_v1914_eng_full.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
rmaildxp_v1914_eng_full.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$_14326_/$_14326_/uninst.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$_14326_/$_14326_/uninst.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$_14326_/Base64Helper.exe
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$_14326_/Base64Helper.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$_14326_/Help/Index.html
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
$_14326_/Help/Index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$_14326_/Help/advanced.html
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$_14326_/Help/advanced.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$_14326_/Help/help0.html
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
$_14326_/Help/help0.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$_14326_/Help/help1.html
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
$_14326_/Help/help1.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$_14326_/Help/help10.html
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
$_14326_/Help/help10.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
$_14326_/Help/help11.html
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
$_14326_/Help/help11.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
$_14326_/Help/help12.html
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
$_14326_/Help/help12.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
$_14326_/Help/help13.html
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
$_14326_/Help/help13.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
$_14326_/Help/help14.html
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
$_14326_/Help/help14.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
$_14326_/Help/help15.html
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
$_14326_/Help/help15.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
$_14326_/Help/help2.html
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
$_14326_/Help/help2.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
$_14326_/Help/help3.html
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
$_14326_/Help/help3.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
$_14326_/Help/help4.html
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
$_14326_/Help/help4.html
Resource
win10v2004-20240802-en
General
-
Target
$_14326_/Base64Helper.exe
-
Size
809KB
-
MD5
db21481f9f0838574236a642966a469c
-
SHA1
a0a21f57d0a6583ad2cadc1df9f46577496eb757
-
SHA256
f814bddf62904b4622af655daf97f3b7824afac41c218fe7d18eed287435587f
-
SHA512
721d9f40ab3901aaeb84264399035853b3279c9472a84fbec90b31324588c512b77702cfb396bbc729f1c997b880e62f7fd5fec953487f0b588c52bb2573c4d3
-
SSDEEP
24576:wsGiUiyhozMTHp5v+zKdpDJD2vofYMH2uk:wniTYTHC+dlJQohk
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Base64Helper.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2380 Base64Helper.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2380 Base64Helper.exe