Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
3EpicLocato....0.zip
windows7-x64
1EpicLocato....0.zip
windows10-2004-x64
1EpicLaunch...or.exe
windows7-x64
6EpicLaunch...or.exe
windows10-2004-x64
1KatyLauncherAPI.dll
windows7-x64
1KatyLauncherAPI.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1General
-
Target
EpicLocator-v1.2.0.zip
-
Size
310KB
-
Sample
230522-jnh9saeh46
-
MD5
5cb804467268aba14e7de6d0633119bf
-
SHA1
29f61c6e35f2618e31363ea85afec16c1bd0e5d1
-
SHA256
30073aefd049bef5c552297b13ff2c606da0d3a3863177816a5644a2f397f0f8
-
SHA512
50e9929cbcc2e6f3be4e3f2db94823fdc966a782572c07986cecd570e9c79d73e7ee58fee00d1de0aac9240a77dc3b89f5b559c756e9ae323c8e6e02e7151004
-
SSDEEP
6144:Q/qrrKcTvxZzkPqsZnxD9rjGqozQxQN3/jBLQtyVYE0Ll:QirrLT5ZInZn/SqyBLQtX1Ll
Static task
static1
Behavioral task
behavioral1
Sample
EpicLocator-v1.2.0.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
EpicLocator-v1.2.0.zip
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
EpicLauncher GameLocator.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
EpicLauncher GameLocator.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
KatyLauncherAPI.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
KatyLauncherAPI.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
Newtonsoft.Json.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
EpicLocator-v1.2.0.zip
-
Size
310KB
-
MD5
5cb804467268aba14e7de6d0633119bf
-
SHA1
29f61c6e35f2618e31363ea85afec16c1bd0e5d1
-
SHA256
30073aefd049bef5c552297b13ff2c606da0d3a3863177816a5644a2f397f0f8
-
SHA512
50e9929cbcc2e6f3be4e3f2db94823fdc966a782572c07986cecd570e9c79d73e7ee58fee00d1de0aac9240a77dc3b89f5b559c756e9ae323c8e6e02e7151004
-
SSDEEP
6144:Q/qrrKcTvxZzkPqsZnxD9rjGqozQxQN3/jBLQtyVYE0Ll:QirrLT5ZInZn/SqyBLQtX1Ll
Score1/10 -
-
-
Target
EpicLauncher GameLocator.exe
-
Size
544KB
-
MD5
bb6365c148588cf6e6e6f7cbc6d284af
-
SHA1
3005228d79aaf5874a96ba8560bdf49ad416f445
-
SHA256
de7673e239ab7c33440f38ead3dad5dc0f474962556e106d0b80c8f9e1e68312
-
SHA512
8fef664146ce6e0f6c4cd54e5ee0c5fe1392bc74ed1bdb578809b466b612425e88e478d2616ce71a773bd7c233c8a475c9e4750a6c2428bb00283f76130af9e7
-
SSDEEP
1536:qr5UKyNGu2xzzKVTvzdj/OF2CShu2xzzKVTvzdj/OF2CT:Wm92pzAh2Nl2pzAh2NT
Score6/10-
Adds Run key to start application
-
-
-
Target
KatyLauncherAPI.dll
-
Size
14KB
-
MD5
3c0b28d75281ef82997b035085334469
-
SHA1
5832854460850b3ee4d763005b09c4d1255c74e6
-
SHA256
c049a5448fad82bef0d56c3603d2231047643352b313eec1c89d6a521c9fe502
-
SHA512
1978644bcebb98d9b0f6b033e19c44293ecba3b0677b29ff66014e007ccd46e03bf1ff8b102f6dde1ad6ede499804fb260a6740c4f862dc3bcc8d5e52b998aab
-
SSDEEP
192:13pQsVKG91DDQtJsjaNL59VgLqvKaxpS1ECQo+Py9Cmq2B4:13hVKU/8JL59VgLqvKaxY1ECQoPE1
Score1/10 -
-
-
Target
Newtonsoft.Json.dll
-
Size
683KB
-
MD5
6815034209687816d8cf401877ec8133
-
SHA1
1248142eb45eed3beb0d9a2d3b8bed5fe2569b10
-
SHA256
7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
-
SHA512
3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721
-
SSDEEP
12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc
Score1/10 -