Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
3EpicLocato....0.zip
windows7-x64
1EpicLocato....0.zip
windows10-2004-x64
1EpicLaunch...or.exe
windows7-x64
6EpicLaunch...or.exe
windows10-2004-x64
1KatyLauncherAPI.dll
windows7-x64
1KatyLauncherAPI.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 07:48
Static task
static1
Behavioral task
behavioral1
Sample
EpicLocator-v1.2.0.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
EpicLocator-v1.2.0.zip
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
EpicLauncher GameLocator.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
EpicLauncher GameLocator.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
KatyLauncherAPI.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
KatyLauncherAPI.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
Newtonsoft.Json.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20230220-en
General
-
Target
EpicLauncher GameLocator.exe
-
Size
544KB
-
MD5
bb6365c148588cf6e6e6f7cbc6d284af
-
SHA1
3005228d79aaf5874a96ba8560bdf49ad416f445
-
SHA256
de7673e239ab7c33440f38ead3dad5dc0f474962556e106d0b80c8f9e1e68312
-
SHA512
8fef664146ce6e0f6c4cd54e5ee0c5fe1392bc74ed1bdb578809b466b612425e88e478d2616ce71a773bd7c233c8a475c9e4750a6c2428bb00283f76130af9e7
-
SSDEEP
1536:qr5UKyNGu2xzzKVTvzdj/OF2CShu2xzzKVTvzdj/OF2CT:Wm92pzAh2Nl2pzAh2NT
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4284 EpicLauncher GameLocator.exe 4284 EpicLauncher GameLocator.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4284 EpicLauncher GameLocator.exe