Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

Moonpredictor.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Moonpredictor.exe

  • Size

    19.8MB

  • Sample

    230724-fvvplsae4x

  • MD5

    a522a590a3a025c51bfab8b702d64f84

  • SHA1

    f0d10ac9d87898beb4dfda6d5c205cb8d1160220

  • SHA256

    20f1e0d126df1e56e7f9c8cb9d56c23fdc24a1a7802fc838c00449400fe7937b

  • SHA512

    56c4d8bd6ab98ed72d72a7bf7c03ca9c02d878dd79b9ceec79d471e679d0c7307b6cbd7eedcbdf5d007f54a41aa8db3fb270e6eb682a9868f367146098002bf6

  • SSDEEP

    393216:LFQts9Y2prJz7B2D4RqbDfDBMpfaMPg5RPW8XKfVGuRegmzCo:ZQts9Y2XfQD4sbbtuf9Pg5U40BvHo

Score
7/10
pyinstallerspywarestealer

Malware Config

Targets

    • Target

      Moonpredictor.exe

    • Size

      19.8MB

    • MD5

      a522a590a3a025c51bfab8b702d64f84

    • SHA1

      f0d10ac9d87898beb4dfda6d5c205cb8d1160220

    • SHA256

      20f1e0d126df1e56e7f9c8cb9d56c23fdc24a1a7802fc838c00449400fe7937b

    • SHA512

      56c4d8bd6ab98ed72d72a7bf7c03ca9c02d878dd79b9ceec79d471e679d0c7307b6cbd7eedcbdf5d007f54a41aa8db3fb270e6eb682a9868f367146098002bf6

    • SSDEEP

      393216:LFQts9Y2prJz7B2D4RqbDfDBMpfaMPg5RPW8XKfVGuRegmzCo:ZQts9Y2XfQD4sbbtuf9Pg5U40BvHo

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks