Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
7Ephinea_PS...er.exe
windows10-2004-x64
3Microsoft....re.dll
windows10-2004-x64
1Microsoft....pf.dll
windows10-2004-x64
1PsoBB.exe
windows10-2004-x64
6WebView2Loader.dll
windows10-2004-x64
3data/ogg/HEAD_ON.ps1
windows10-2004-x64
3dgVoodoo_d3d9.dll
windows10-2004-x64
1dxvk_d3d9.dll
windows10-2004-x64
1ephinea.dll
windows10-2004-x64
3online.exe
windows10-2004-x64
1online_compat.exe
windows10-2004-x64
1online_win7.exe
windows10-2004-x64
1option.exe
windows10-2004-x64
1patchclient.dll
windows10-2004-x64
8uninstall.exe
windows10-2004-x64
7Analysis
-
max time kernel
414s -
max time network
1165s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
28/06/2024, 16:39
Static task
static1
Behavioral task
behavioral1
Sample
Ephinea_PSOBB_Installer.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral2
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral4
Sample
PsoBB.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
WebView2Loader.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral6
Sample
data/ogg/HEAD_ON.ps1
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
dgVoodoo_d3d9.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral8
Sample
dxvk_d3d9.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
ephinea.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral10
Sample
online.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
online_compat.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral12
Sample
online_win7.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
option.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral14
Sample
patchclient.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
uninstall.exe
Resource
win10v2004-20240611-en
General
-
Target
online_win7.exe
-
Size
562KB
-
MD5
6906e30a99744586be9c5123d82002b4
-
SHA1
8b5799f7d90b99a88a40205b3d8554dea1f859e8
-
SHA256
1df0addde0d03f3cf35ad3e0279949fde44f31416e270c4b28950c546bfdff5d
-
SHA512
4b1ab74da5ac50f98123edae9c35536882f258293c4473ccac09564da07367b21061088fa244023c65c3302d7335e514f999156020288f526fa7da86e666a0f0
-
SSDEEP
12288:wNpbdPATFFLDzaN6iXNQaCeguXGQPFE66hLDzaN6iXNQaCT:4gTFFGXNQaCegkPp6hGXNQaCT
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 860 online_win7.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 860 online_win7.exe 860 online_win7.exe