Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
3BepInEx/co...er.dll
windows7-x64
1BepInEx/co...er.dll
windows10-2004-x64
1CoreKeeper...64.dll
windows7-x64
1CoreKeeper...64.dll
windows10-2004-x64
1Custom.dll
windows7-x64
1Custom.dll
windows10-2004-x64
1OnlineFix.ini
windows7-x64
1OnlineFix.ini
windows10-2004-x64
1OnlineFix.url
windows7-x64
6OnlineFix.url
windows10-2004-x64
6OnlineFix64.dll
windows7-x64
1OnlineFix64.dll
windows10-2004-x64
1SteamOverlay64.dll
windows7-x64
1SteamOverlay64.dll
windows10-2004-x64
1dlllist.txt
windows7-x64
1dlllist.txt
windows10-2004-x64
1winmm.dll
windows7-x64
1winmm.dll
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
05/09/2024, 18:37
Static task
static1
Behavioral task
behavioral1
Sample
BepInEx/core/BepInEx.Preloader.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
BepInEx/core/BepInEx.Preloader.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
CoreKeeper_Data/Plugins/x86_64/steam_api64.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
CoreKeeper_Data/Plugins/x86_64/steam_api64.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Custom.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Custom.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
OnlineFix.ini
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
OnlineFix.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
OnlineFix.url
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
OnlineFix.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
OnlineFix64.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
OnlineFix64.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
SteamOverlay64.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
SteamOverlay64.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
dlllist.txt
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
dlllist.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
winmm.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
winmm.dll
Resource
win10v2004-20240802-en
General
-
Target
dlllist.txt
-
Size
198B
-
MD5
90876b772c475a69c7251e985300f1be
-
SHA1
1c2a4e7fc63dbed25ccba2659ccf2801899b1c59
-
SHA256
f1b85990e5a5d0db0dce85eaee84c8983ebf424cfccf10eebbc8b2200109f8d1
-
SHA512
255aa00034e2b63e03c7def5a32fa8989ba0bd8166dac50e54e5f00cc58ca758c217c964bd9937cacfcd51beffdfb6af9ac87c57a97ae5a6b3560a2b48dfa44a
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2088 NOTEPAD.EXE