Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

3

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

3

moonspoofe...up.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

3

moonspoofe...er.exe

windows10-2004-x64

3

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

3

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

3

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

3

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...er.exe

windows10-2004-x64

1

moonspoofe...up.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    31s
  • max time network
    48s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/12/2022, 13:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    moonspoofer-main/moonspoofer/bin/Debug/app.publish/MoonSpoofer.exe

  • Size

    370KB

  • MD5

    7f5c9fbb3356648527e17b7e29aa7b0e

  • SHA1

    9c0cb5cc2d3de45f5ff88f80a8b51783cbb01ed3

  • SHA256

    c567b95cd34b4fb3db0a464edece8ad65c702aadda21ae9f297807d1ce209915

  • SHA512

    8581d57bb4279888cd9e7bf5ab4e894f5a6f2c46d4528f13814d5a3f528c876298f767a3abf7e00277ae3653bf004aecda13ae300aa62e7c2f7e4cebcb3450f9

  • SSDEEP

    6144:VtuezJ/rvhl0bBGaA5v7xpKpQ9/3Ew/uo27pUogiDsZAEw/uo2uEw/uo2uEw/uoK:Pl5B0K527lsZK52hK52hK52T62

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\moonspoofer-main\moonspoofer\bin\Debug\app.publish\MoonSpoofer.exe
    "C:\Users\Admin\AppData\Local\Temp\moonspoofer-main\moonspoofer\bin\Debug\app.publish\MoonSpoofer.exe"
    1⤵
      PID:4952
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4952 -s 1056
        2⤵
        • Program crash
        PID:3396
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4952 -ip 4952
      1⤵
        PID:4860

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4952-132-0x0000000000560000-0x00000000005C2000-memory.dmp

        Filesize

        392KB

        Download

      • memory/4952-133-0x0000000005420000-0x00000000059C4000-memory.dmp

        Filesize

        5.6MB

        Download

      • memory/4952-134-0x0000000004F60000-0x0000000004FF2000-memory.dmp

        Filesize

        584KB

        Download

      • memory/4952-135-0x0000000004F10000-0x0000000004F22000-memory.dmp

        Filesize

        72KB

        Download

      • memory/4952-136-0x0000000005030000-0x000000000503A000-memory.dmp

        Filesize

        40KB

        Download