ce824d6210e678b8df7985f6b81e09e18835b3b316f7df2e6e08fb17a48dd833

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...up.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...er.exe

windows10-2004-x64

moonspoofe...up.exe

windows10-2004-x64

Analysis

max time kernel
34s
max time network
50s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
18/12/2022, 13:36

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

moonspoofer-main/moonspoofer/bin/Debug/MoonSpoofer.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral2

Sample

moonspoofer-main/moonspoofer/bin/Debug/app.publish/MoonSpoofer.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral3

Sample

moonspoofer-main/moonspoofer/bin/Release/MoonSpoofer.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral4

Sample

moonspoofer-main/moonspoofer/bin/Release/app.publish/Application Files/MoonSpoofer_1_0_0_26/MoonSpoofer.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral5

Sample

moonspoofer-main/moonspoofer/bin/Release/app.publish/MoonSpoofer.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral6

Sample

moonspoofer-main/moonspoofer/bin/Release/app.publish/setup.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral7

Sample

moonspoofer-main/moonspoofer/obj/Debug/MoonSpoofer.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral8

Sample

moonspoofer-main/moonspoofer/obj/Release/MoonSpoofer.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral9

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/Loader_1_0_0_0/Loader.exe

Resource

win10v2004-20220901-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral10

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/Loader_1_0_0_1/Loader.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral11

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/Loader_1_0_0_2/Loader.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral12

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/MoonSpoofer_1_0_0_21/Nowy folder/MoonSpoofer.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral13

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/MoonSpoofer_1_0_0_22/MoonSpoofer.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral14

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/MoonSpoofer_1_0_0_23/MoonSpoofer.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral15

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/MoonSpoofer_1_0_0_24/MoonSpoofer.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral16

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/MoonSpoofer_1_0_0_25/MoonSpoofer.exe

Resource

win10v2004-20220901-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral17

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/MoonSpoofer_1_0_0_26/MoonSpoofer.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral18

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_11/UranSpoofer.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral19

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_12/UranSpoofer.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral20

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_12/halo/UranSpoofer.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral21

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_15/UranSpoofer.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral22

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_16/UranSpoofer.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral23

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_16/UranSpoofer_Secure/UranSpoofer.exe

Resource

win10v2004-20220901-en

windows10-2004-x64

2 signatures

30 seconds

Behavioral task

behavioral24

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_17/Confused/UranSpoofer.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral25

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_18/UranSpoofer.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral26

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_19/UranSpoofer.exe

Resource

win10v2004-20220901-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral27

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_19/UranSpoofer_Secure/Protected/UranSpoofer.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral28

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_19/UranSpoofer_Secure/UranSpoofer.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

30 seconds

Behavioral task

behavioral29

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_6/UranSpoofer.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral30

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_7/UranSpoofer.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral31

Sample

moonspoofer-main/moonspoofer/publikuj/Application Files/UranSpoofer_1_0_0_8/UranSpoofer.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral32

Sample

moonspoofer-main/moonspoofer/publikuj/setup.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

30 seconds

Report Analysis Logs

General

Target

moonspoofer-main/moonspoofer/obj/Debug/MoonSpoofer.exe
Size

369KB
MD5

2d73d569359592ac10ce35d14a6f8526
SHA1

886a6053e7723e1358eb1d22c339375e5a794ce9
SHA256

7d202f15c7fac8991417ec14c890dfc79c4ce6aef8498bb7e551473e65731ba9
SHA512

d5543e97545e7464cce975b14e41f60d56e8a2e3fce35fbf3d6e1ae1bad36e6a94271cc3e3107fd9797b2e3f587d1d2fdeaa7d1e5a5f663771b1b4b161943aed
SSDEEP

6144:CtuezJ/rvhl0bBGaA5v7xpKpQ9/3Ew/uo27pUogiDsZAEw/uo2uEw/uo2uEw/uor:Wl5B0K527lsZK52hK52hK52T6

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
860	1168	WerFault.exe	78

Processes

C:\Users\Admin\AppData\Local\Temp\moonspoofer-main\moonspoofer\obj\Debug\MoonSpoofer.exe
"C:\Users\Admin\AppData\Local\Temp\moonspoofer-main\moonspoofer\obj\Debug\MoonSpoofer.exe"
1⤵
PID:1168
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1168 -s 1064
  2⤵
  - Program crash
  PID:860

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1168 -ip 1168
1⤵
PID:4952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1168-132-0x0000000000AA0000-0x0000000000B02000-memory.dmp

Filesize
392KB

Download
memory/1168-133-0x0000000005A10000-0x0000000005FB4000-memory.dmp

Filesize
5.6MB

Download
memory/1168-134-0x0000000005500000-0x0000000005592000-memory.dmp

Filesize
584KB

Download
memory/1168-135-0x0000000005460000-0x0000000005472000-memory.dmp

Filesize
72KB

Download
memory/1168-136-0x00000000054E0000-0x00000000054EA000-memory.dmp

Filesize
40KB

Download