Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
3BepInEx/co...er.dll
windows7-x64
1BepInEx/co...er.dll
windows10-2004-x64
1CoreKeeper...64.dll
windows7-x64
1CoreKeeper...64.dll
windows10-2004-x64
1Custom.dll
windows7-x64
1Custom.dll
windows10-2004-x64
1OnlineFix.ini
windows7-x64
1OnlineFix.ini
windows10-2004-x64
1OnlineFix.url
windows7-x64
6OnlineFix.url
windows10-2004-x64
6OnlineFix64.dll
windows7-x64
1OnlineFix64.dll
windows10-2004-x64
1SteamOverlay64.dll
windows7-x64
1SteamOverlay64.dll
windows10-2004-x64
1dlllist.txt
windows7-x64
1dlllist.txt
windows10-2004-x64
1winmm.dll
windows7-x64
1winmm.dll
windows10-2004-x64
1Analysis
-
max time kernel
93s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
05/09/2024, 18:37
Static task
static1
Behavioral task
behavioral1
Sample
BepInEx/core/BepInEx.Preloader.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
BepInEx/core/BepInEx.Preloader.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
CoreKeeper_Data/Plugins/x86_64/steam_api64.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
CoreKeeper_Data/Plugins/x86_64/steam_api64.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Custom.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Custom.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
OnlineFix.ini
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
OnlineFix.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
OnlineFix.url
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
OnlineFix.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
OnlineFix64.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
OnlineFix64.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
SteamOverlay64.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
SteamOverlay64.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
dlllist.txt
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
dlllist.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
winmm.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
winmm.dll
Resource
win10v2004-20240802-en
General
-
Target
OnlineFix.ini
-
Size
687B
-
MD5
c878eaba3c3b7b5c3275cd7c3d5ec17a
-
SHA1
7e86e7f7f2e2c6594b04cd8dc665905a1e79a6f1
-
SHA256
3768ca8cf2abd53e5429ce22201116a7a39b772327cd1a585e32839810ceb746
-
SHA512
efff96e4819d58596b155108c4df0a1600754ca2d18ede17ade80231651167155fa6de0be698b57b61cb81d4f59ef628815838e8c5b0dc9f03bf8fa53e3c2a7b
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1060 NOTEPAD.EXE