Overview

overview

3

Static

static

3

lib/MoonAdditions.dll

windows7-x64

1

lib/MoonAdditions.dll

windows10-2004-x64

1

lib/MoonImGui.dll

windows7-x64

1

lib/MoonImGui.dll

windows10-2004-x64

1

lib/base64.dll

windows7-x64

1

lib/base64.dll

windows10-2004-x64

1

lib/cjson.dll

windows7-x64

1

lib/cjson.dll

windows10-2004-x64

1

lib/cjson/cjson.dll

windows7-x64

1

lib/cjson/cjson.dll

windows10-2004-x64

1

lib/des56.dll

windows7-x64

1

lib/des56.dll

windows10-2004-x64

1

lib/encoding.js

windows7-x64

1

lib/encoding.js

windows10-2004-x64

1

lib/htmlparser.js

windows7-x64

1

lib/htmlparser.js

windows10-2004-x64

1

lib/htmlpa...ode.js

windows7-x64

1

lib/htmlpa...ode.js

windows10-2004-x64

1

lib/iconv.dll

windows7-x64

1

lib/iconv.dll

windows10-2004-x64

1

lib/imgui.js

windows7-x64

1

lib/imgui.js

windows10-2004-x64

1

lib/imgui_addons.js

windows7-x64

1

lib/imgui_addons.js

windows10-2004-x64

1

lib/inspect.js

windows7-x64

1

lib/inspect.js

windows10-2004-x64

1

lib/json2lua.lua

ubuntu-18.04-amd64

1

lib/json2lua.lua

debian-9-armhf

1

lib/json2lua.lua

debian-9-mips

1

lib/json2lua.lua

debian-9-mipsel

1

lib/lanes/lanes.js

windows7-x64

1

lib/lanes/lanes.js

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    31c93b3f2f8fccb7bbc2a3d79e274143

  • Size

    5.5MB

  • MD5

    31c93b3f2f8fccb7bbc2a3d79e274143

  • SHA1

    edf49b605e6633aa0413cbec003be4735db54ea7

  • SHA256

    696b2344a39ce1637da5a838dd3c65e32ed657d459422e6814fe180356de043a

  • SHA512

    4a178aeacce7a816562de7664fd3f8bb4d73f1827052cd806d9697b2575f539bda845c0ad6cf92192e0b1df389663ef4546d0d75453f3e3bac776293dfc1c37c

  • SSDEEP

    98304:q2t71d5H2C31RPEi9ttDFjQqHmwJa5qZXMWXPCpkEOhBncSZ8BMF:q2HdceX9DdfHmwJue9Xqp1+Bnd2c

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • 31c93b3f2f8fccb7bbc2a3d79e274143
    .zip
  • Lawyers.luac
  • lib/MoonAdditions.dll
    .dll windows:5 windows x86 arch:x86

    2d3ec0d8ac68567c8bbbba5c3a2822b7


    Headers

    Imports

    Exports

    Sections

  • lib/MoonImGui.dll
    .dll windows:5 windows x86 arch:x86

    b2d64f439d872515740743b6896801be


    Headers

    Imports

    Exports

    Sections

  • lib/base64.dll
    .dll windows:6 windows x86 arch:x86

    751e262dc89cf9bc842f9fb10dae679d


    Headers

    Imports

    Exports

    Sections

  • lib/bitex.lua
  • lib/cjson.dll
    .dll windows:5 windows x86 arch:x86

    13115fe24663146dfd2ee3956fc02a02


    Headers

    Imports

    Exports

    Sections

  • lib/cjson/cjson.dll
    .dll windows:6 windows x86 arch:x86

    646b257b387749132fe05953dbdd3a9d


    Headers

    Imports

    Exports

    Sections

  • lib/cjson/cjson/util.lua
  • lib/cjson/util.lua
  • lib/des56.dll
    .dll windows:6 windows x86 arch:x86

    5cd94f39d3257ff1e2a230f037448932


    Headers

    Imports

    Exports

    Sections

  • lib/encoding.lua
    .js
  • lib/game/globals.lua
  • lib/game/keys.lua
  • lib/game/models.lua
  • lib/game/weapons.lua
  • lib/htmlparser.lua
    .js
  • lib/htmlparser/ElementNode.lua
    .js
  • lib/htmlparser/voidelements.lua
  • lib/iconv.dll
    .dll windows:5 windows x86 arch:x86

    32c7e99f7a4e9fea3c5eaf0cf28dea1c


    Headers

    Imports

    Exports

    Sections

  • lib/iconv/COPYING-libiconv
  • lib/iconv/README-libiconv
  • lib/iconv/README-lua-iconv
  • lib/imgui.lua
    .js
  • lib/imgui_addons.lua
    .js
  • lib/inspect.lua
    .js
  • lib/json2lua.lua
    .sh linux
  • lib/lanes/lanes.lua
    .js
  • lib/lanes/lanes/core.dll
    .dll windows:6 windows x86 arch:x86

    76f8d883664d197527dc6219778c2014


    Headers

    Imports

    Exports

    Sections

  • lib/lfs.dll
    .dll windows:6 windows x86 arch:x86

    e9db98f361b96ad50703f384d479544a


    Headers

    Imports

    Exports

    Sections

  • lib/lpeg/lpeg.dll
    .dll windows:6 windows x86 arch:x86

    624b3c369abbef1cef9cd472b0756409


    Headers

    Imports

    Exports

    Sections

  • lib/lpeg/re.lua
  • lib/lrexlib-pcre/rex_pcre.dll
    .dll windows:6 windows x86 arch:x86

    b6338c9c8fb382d813fadb13a3115c79


    Headers

    Imports

    Exports

    Sections

  • lib/ltn12.lua
    .js
  • lib/lua2json.lua
    .sh linux
  • lib/luafilesystem/lfs.dll
    .dll windows:6 windows x86 arch:x86

    e9db98f361b96ad50703f384d479544a


    Headers

    Imports

    Exports

    Sections

  • lib/luasocket/ltn12.lua
    .js
  • lib/luasocket/mime.lua
    .js
  • lib/luasocket/mime/core.dll
    .dll windows:6 windows x86 arch:x86

    ec9717053080f592fcd66a0df7291450


    Headers

    Imports

    Exports

    Sections

  • lib/luasocket/socket.lua
    .js
  • lib/luasocket/socket/core.dll
    .dll windows:6 windows x86 arch:x86

    9e9fcae90366572b3c771f819b84f34d


    Headers

    Imports

    Exports

    Sections

  • lib/luasocket/socket/ftp.lua
    .js
  • lib/luasocket/socket/headers.lua
  • lib/luasocket/socket/http.lua
    .js
  • lib/luasocket/socket/smtp.lua
  • lib/luasocket/socket/tp.lua
    .js
  • lib/luasocket/socket/url.lua
  • lib/luasql-mysql/luasql/mysql.dll
    .dll windows:6 windows x86 arch:x86

    e9f1921ed9cb91cc4ec1afaa2590b77d


    Headers

    Imports

    Exports

    Sections

  • lib/luasql-sqlite/luasql/sqlite3.dll
    .dll windows:6 windows x86 arch:x86

    73ca0fd6256c0d981e23df89d3046cc0


    Headers

    Imports

    Exports

    Sections

  • lib/lub/Autoload.lua
  • lib/lub/Dir.lua
  • lib/lub/Param.lua
  • lib/lub/Template.lua
  • lib/lub/init.lua
    .js
  • lib/lume/lume.lua
    .js
  • lib/lustache/lustache.lua
    .js
  • lib/lustache/lustache/context.lua
  • lib/lustache/lustache/renderer.lua
    .js
  • lib/lustache/lustache/scanner.lua
  • lib/matrix3x3.lua
    .js
  • lib/md5.lua
  • lib/md5/core.dll
    .dll windows:6 windows x86 arch:x86

    58828ea62143b1c7a9a9f122282994a5


    Headers

    Imports

    Exports

    Sections

  • lib/mime.lua
    .js
  • lib/mime/core.dll
    .dll windows:6 windows x86 arch:x86

    ec9717053080f592fcd66a0df7291450


    Headers

    Imports

    Exports

    Sections

  • lib/moonloader.lua
  • lib/penlight/pl/Date.lua
    .js
  • lib/penlight/pl/List.lua
  • lib/penlight/pl/Map.lua
  • lib/penlight/pl/MultiMap.lua
  • lib/penlight/pl/OrderedMap.lua
  • lib/penlight/pl/Set.lua
  • lib/penlight/pl/app.lua
  • lib/penlight/pl/array2d.lua
    .js
  • lib/penlight/pl/class.lua
    .js
  • lib/penlight/pl/compat.lua
  • lib/penlight/pl/comprehension.lua
  • lib/penlight/pl/config.lua
  • lib/penlight/pl/data.lua
    .js
  • lib/penlight/pl/dir.lua
    .js
  • lib/penlight/pl/file.lua
  • lib/penlight/pl/func.lua
  • lib/penlight/pl/import_into.lua
    .js
  • lib/penlight/pl/init.lua
  • lib/penlight/pl/input.lua
  • lib/penlight/pl/lapp.lua
    .js
  • lib/penlight/pl/lexer.lua
    .js
  • lib/penlight/pl/luabalanced.lua
  • lib/penlight/pl/operator.lua
  • lib/penlight/pl/path.lua
    .ps1
  • lib/penlight/pl/permute.lua
    .js
  • lib/penlight/pl/pretty.lua
    .js
  • lib/penlight/pl/seq.lua
    .js
  • lib/penlight/pl/sip.lua
    .ps1
  • lib/penlight/pl/strict.lua
    .js
  • lib/penlight/pl/stringio.lua
  • lib/penlight/pl/stringx.lua
  • lib/penlight/pl/tablex.lua
    .js
  • lib/penlight/pl/template.lua
  • lib/penlight/pl/test.lua
  • lib/penlight/pl/text.lua
    .js
  • lib/penlight/pl/types.lua
    .js
  • lib/penlight/pl/url.lua
  • lib/penlight/pl/utils.lua
  • lib/penlight/pl/xml.lua
    .js
  • lib/requests.lua
    .js
  • lib/rkeys.lua
  • lib/samp/events.lua
    .vbs
  • lib/samp/events/bitstream_io.lua
    .js
  • lib/samp/events/core.lua
  • lib/samp/events/extra_types.lua
    .js
  • lib/samp/events/handlers.lua
    .js
  • lib/samp/events/utils.lua
  • lib/samp/raknet.lua
    .vbs
  • lib/samp/synchronization.lua
  • lib/sampfuncs.lua
  • lib/socket.lua
    .js
  • lib/socket/core.dll
    .dll windows:6 windows x86 arch:x86

    9e9fcae90366572b3c771f819b84f34d


    Headers

    Imports

    Exports

    Sections

  • lib/socket/ftp.lua
    .js
  • lib/socket/headers.lua
  • lib/socket/http.lua
    .js
  • lib/socket/smtp.lua
  • lib/socket/tp.lua
    .js
  • lib/socket/url.lua
  • lib/ssl.dll
    .dll windows:6 windows x86 arch:x86

    71c11249508eb697b5113c5b2ee26c01


    Headers

    Imports

    Exports

    Sections

  • lib/ssl.lua
  • lib/ssl/https.lua
    .js
  • lib/vector3d.lua
    .js
  • lib/vkeys.lua
  • lib/windows/init.lua
  • lib/windows/message.lua
  • lib/xml/Parser.lua
  • lib/xml/core.dll
    .dll windows:6 windows x86 arch:x86

    04151667cd8781e41e7fca22ca2f9971


    Headers

    Imports

    Exports

    Sections

  • lib/xml/init.lua