Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
7Ephinea_PS...er.exe
windows10-2004-x64
3Microsoft....re.dll
windows10-2004-x64
1Microsoft....pf.dll
windows10-2004-x64
1PsoBB.exe
windows10-2004-x64
6WebView2Loader.dll
windows10-2004-x64
3data/ogg/HEAD_ON.ps1
windows10-2004-x64
3dgVoodoo_d3d9.dll
windows10-2004-x64
1dxvk_d3d9.dll
windows10-2004-x64
1ephinea.dll
windows10-2004-x64
3online.exe
windows10-2004-x64
1online_compat.exe
windows10-2004-x64
1online_win7.exe
windows10-2004-x64
1option.exe
windows10-2004-x64
1patchclient.dll
windows10-2004-x64
8uninstall.exe
windows10-2004-x64
7Analysis
-
max time kernel
1358s -
max time network
1172s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
28/06/2024, 16:39
Static task
static1
Behavioral task
behavioral1
Sample
Ephinea_PSOBB_Installer.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral2
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral4
Sample
PsoBB.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
WebView2Loader.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral6
Sample
data/ogg/HEAD_ON.ps1
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
dgVoodoo_d3d9.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral8
Sample
dxvk_d3d9.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
ephinea.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral10
Sample
online.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
online_compat.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral12
Sample
online_win7.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
option.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral14
Sample
patchclient.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
uninstall.exe
Resource
win10v2004-20240611-en
General
-
Target
online.exe
-
Size
565KB
-
MD5
fb666d5d9a89d3103b224673ce0df911
-
SHA1
26630e69380e6fa1138d1aef8a49822c5e8fd0bd
-
SHA256
284d0e0a8094c6877a95890ffd828452cae498e09ddc1371c9b2a824cb3b706a
-
SHA512
934065fefb2883baccfc3d1bddee9ff97647b265e5db08c9b71683208de55c08dd94ecd246cd90a1e3894210893ad556299e8f27f9be243433fdbad4b255bc89
-
SSDEEP
12288:t0C8OYdPATFFLDzaN6iXNQaCeguXGQPFE66TLDzaN6iXNQaCz:tBTFFGXNQaCegkPp6TGXNQaCz
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4536 online.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4536 online.exe 4536 online.exe