Overview

overview

3

Static

static

3

assets/lun...er.ps1

windows7-x64

1

assets/lun...er.ps1

windows10-2004-x64

1

Flight Cli...nk.dll

windows7-x64

1

Flight Cli...nk.dll

windows10-2004-x64

1

Flight Cli...32.dll

windows7-x64

1

Flight Cli...32.dll

windows10-2004-x64

1

Flight Cli...64.dll

windows7-x64

1

Flight Cli...64.dll

windows10-2004-x64

1

Flight Cli...51.dll

windows7-x64

1

Flight Cli...51.dll

windows10-2004-x64

1

Flight Cli...x8.dll

windows7-x64

1

Flight Cli...x8.dll

windows10-2004-x64

1

Flight Cli...64.dll

windows7-x64

1

Flight Cli...64.dll

windows10-2004-x64

1

Flight Cli...aw.dll

windows7-x64

1

Flight Cli...aw.dll

windows10-2004-x64

1

Flight Cli...64.dll

windows7-x64

1

Flight Cli...64.dll

windows10-2004-x64

1

Flight Cli...ab.dll

windows7-x64

1

Flight Cli...ab.dll

windows10-2004-x64

1

Flight Cli...ch.dll

windows7-x64

1

Flight Cli...ch.dll

windows10-2004-x64

1

Flight Cli...32.dll

windows7-x64

1

Flight Cli...32.dll

windows10-2004-x64

1

Flight Cli...64.dll

windows7-x64

1

Flight Cli...64.dll

windows10-2004-x64

1

Flight Cli...tv.dll

windows7-x64

3

Flight Cli...tv.dll

windows10-2004-x64

3

Flight Cli...gl.dll

windows7-x64

3

Flight Cli...gl.dll

windows10-2004-x64

3

Flight Cli...64.dll

windows7-x64

1

Flight Cli...64.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Flight Client for Cracked.zip

  • Size

    176.4MB

  • Sample

    240211-2cs9qaea43

  • MD5

    3b1b45ec380b8e87ee2082fdd607a4ee

  • SHA1

    d2f5f018a4dd62d43f96ad42f9028e788acd8775

  • SHA256

    3ed0c3dd0b31547db0d079c83301b2ca7d86dde5fab1d981f8b0c40366d007f7

  • SHA512

    edf72090d1347707b28422e7a23982045a67c833b7751b79bf5461272c36f0114305a921bb2cb15a964208c57670458bf0c383659469ecc65338695aaaf0cf77

  • SSDEEP

    3145728:wrc1W6yIZPnHFeOQFieF1SdJDxZaal1rpOv94vh3Wvex/:TfLxe4UalRA9K3Wv2/

Score
3/10

Malware Config

Targets

    • Target

      assets/lunar/streamer/filter

    • Size

      2KB

    • MD5

      0d85ae1f7f53cf0d3de7153bf66e814d

    • SHA1

      cd10d87266df8d55e3a2506eb949bd52b97e1340

    • SHA256

      5eb2ecf2e85b17385f343f182bdef3567878c86a70cea419ac24a52c70544cec

    • SHA512

      7901f5476caca784f3d38406d00ee0bd30ee271db24e0e5c748309ad2692b1d528381b56782cc35b6154d4efefaecd341991f102138060d966dfb9e0c065aecc

    Score
    1/10
    behavioral1behavioral2

    • Target

      Flight Client for Cracked/natives/MumbleLink.dll

    • Size

      214KB

    • MD5

      73926efe27b84a7ea0dfb8746a5a0716

    • SHA1

      f9ba6e35b8886fe204f33189fcc0197ed4868fdf

    • SHA256

      3a39e1dea679f9a05207e6a52eb4b762d282c8b8a4e3a67bc3dd2039b13c287c

    • SHA512

      efa6f624382f3ab7e2d1c8a38be3779add61a0a847520c768a02918a024d9530faadf085ab76cd08150658446c205dbee15c08c21264dadb1b50e201d568ea2f

    • SSDEEP

      3072:W9Joh7htyypSdFdA85a/wHx0700NDqZVOfWPRLoY46uvwld5l:IJol/yLF+2a/kx07kFohH8

    Score
    1/10
    behavioral3behavioral4

    • Target

      Flight Client for Cracked/natives/OpenAL32.dll

    • Size

      381KB

    • MD5

      9e02334f9bba622885eadb059f0633b3

    • SHA1

      ede381bf55e7d0cd3a7e058237bbc66a8ff63837

    • SHA256

      baf27fc91dc852d78889e052cfc9ed2b6fc0927258bb507a895c6fcd50f10fef

    • SHA512

      066eaaee241976d99e3f11de415976fb0e47e97035d4d7a7c121c33882190f3546637650f841a2858ac1734655f4994dc2cb8c5bdda5828557485fc20a779def

    • SSDEEP

      6144:qB0wNMEdGJE5cN8PLJ8I1kabGLPwrWr+JervPI6YXaZ8AO8+H1MOi7BU:qBDL+af1kabGL/r+JwvPjKaZ8NMO

    Score
    1/10
    behavioral5behavioral6

    • Target

      Flight Client for Cracked/natives/OpenAL64.dll

    • Size

      373KB

    • MD5

      89021c218a3f6feb807a664f852ffbd3

    • SHA1

      97362fba53dfb6d9581b8c64829f4b1d98a97855

    • SHA256

      9261b66010a845ddef9f61d5e4266fe2f08a53f3605da002e9e8f8d202bdbc5e

    • SHA512

      e511c707c4453016cdeefcbc863fbf2750ad9cda12ad31f27369d5a396f9c98d9ef37fafb4030c683f17b1e2cdcfce924015fe49dd6652c3060bb0ba77ea3064

    • SSDEEP

      6144:ABdTusYmeqPD3H/Jm9iQV4+ttOpJ2z4dpFg1RB/vPI6YXaZqRs0:AjTWIbgOmyEvPjKaZqR

    Score
    1/10
    behavioral7behavioral8

    • Target

      Flight Client for Cracked/natives/avutil-ttv-51.dll

    • Size

      638KB

    • MD5

      c804476200c9b4910cbc350c102fc3fe

    • SHA1

      97ae5816326546ef5672ec795d4e79e75d9298d7

    • SHA256

      d16151cf613bd26f9138188efab2e55df37b0c21956ea70adc252d0fa35ae3cc

    • SHA512

      468a2b13880dca54314c4a4105c714b0b189a5918b983e8bbaf4a43c78a7c995d99cae737d0222ca6923e194478e9a656dda6dca2d09f2ddc676bda4b20ed7b5

    • SSDEEP

      6144:mN2o9X6YsZZUZsREg3rscdPVsHB5exH49kIOz73zxv/1Bt3Azjyaj22p:A9KYsZ+ZqbH49kIO/39DGzjyaj22p

    Score
    1/10
    behavioral10behavioral9

    • Target

      Flight Client for Cracked/natives/jinput-dx8.dll

    • Size

      60KB

    • MD5

      ec587acff9c06d699829908b515ea17e

    • SHA1

      50348b2958b017df3bf30d7915ab61a4cb9a2b33

    • SHA256

      89779abf806a93dd809bc7a4914967d0e6924dedf293afd48dd205dbce87d8b8

    • SHA512

      2a7895d6196e3f1f740982bd4d0daeba255a033c971638e3aebd2cd2233c39f7c8e92c72d2eeb41f8b368d388a3b270fee2cbe219ee239f5d62af9f6f8ed72d7

    • SSDEEP

      768:2Rj4ZLedvA5Z3cYlqcMOml0V6jY/MDS5TQkuzFqIn1pCDFECBXT7kE:gyLwvA/cYuLpYMSp2zJn330TT

    Score
    1/10
    behavioral11behavioral12

    • Target

      Flight Client for Cracked/natives/jinput-dx8_64.dll

    • Size

      63KB

    • MD5

      90cab52fca89e7d233741c0439dc2005

    • SHA1

      5d9a7d3fb6224dab97aaff7bd9430232732d9be8

    • SHA256

      a38cb458b9e5a246d7418f38ac04430c2e5a3f46b082955d6dfd5d2bd74f4222

    • SHA512

      041ca3aa3d6560f207d841c8af1939e4e93538fe4f34d74fb9eee003733d98783914c6cbe45022c483a6cfb54f0e4f25013f67851d9ae6e9ea6a8cc158d28936

    • SSDEEP

      1536:PVt32LOgsg0Vn88QhCuUDhsI0CSS2u4mL5Ie2JQ:H2JsLV88QguUFT9DL5I9JQ

    Score
    1/10
    behavioral13behavioral14

    • Target

      Flight Client for Cracked/natives/jinput-raw.dll

    • Size

      58KB

    • MD5

      0862d141de8b4dd93ac55cd4a1a78b69

    • SHA1

      4d982f408e815519c2289cd720c78338392a9887

    • SHA256

      0a8c0b47e173453bd92da224f73a6aff35b07c2db315abaf33e68edbdb147971

    • SHA512

      c070516f902082c3eda3f19fab6d6a6998442664f1b25d5d4c2229c03b7cac1a2a41d78b98474dfde3514bc206f5fb92e1949627e3e64052e0ed880e3f6a52ad

    • SSDEEP

      768:YxAM8x3LQmQhccHXx+LHfFCxMJvI/+q9c6LTZsTUkwS9/FE5HBXTWoJCRX:tDI3+jFWTLTiUknG5NT9JMX

    Score
    1/10
    behavioral15behavioral16

    • Target

      Flight Client for Cracked/natives/jinput-raw_64.dll

    • Size

      61KB

    • MD5

      ffc85e4a631d90112aee8e213cd367cd

    • SHA1

      067c11135f9ebeb554d5f80b7a8a5244c0f3b7d7

    • SHA256

      832308f96b1760f2ebc183d1a1771278bb3236e4567dd7a23e1eaecf95f9c03c

    • SHA512

      376393d9351ad2317bdff831df012ef993039c6bcb0616dec3c91ff1b13568a6f04c3bc8a0f9888aabafa7182513fe5f7fe5fe1fca7f14f64b58414e02bd8c48

    • SSDEEP

      1536:ZFG7/fQHJY7EJsvjf30G8DbI7RfnBUVEGhM0q2JKmf6:ZFG7QHy7EJsvjfkG8QnByfJKm

    Score
    1/10
    behavioral17behavioral18

    • Target

      Flight Client for Cracked/natives/jinput-wintab.dll

    • Size

      55KB

    • MD5

      7b5d669b490d5737d8a9d1f96274e2e5

    • SHA1

      e7b9beead279298611d0c4753089d3af07c4c9e9

    • SHA256

      59201c94eb563025e47fe6b6f5c4dc326f0059d49285e2d3a44482cb60ffc9e2

    • SHA512

      ac43cfe9e3ef9dc0e1d2e49a8bbba041b5eca0d4822e694031c694f463017f39ad0131b9f689cc30d177bbf0253f6d2942314683c1ab51a54674ad1309baaeff

    • SSDEEP

      768:gxucOm6iQLZXNvJGgY1mus+XBpkJ3L6GAwk44Rv+1mYxTauAR:ZcZQbzZC8J3LfA0Wk1T4R

    Score
    1/10
    behavioral19behavioral20

    • Target

      Flight Client for Cracked/natives/jnidispatch.dll

    • Size

      79KB

    • MD5

      57697cbdd321ae7d06f5da04e821f908

    • SHA1

      67167f2b2fce8db5f9f64a372b0da54730d3ee51

    • SHA256

      361e173e6e50cb1bf8b7fab38c1ff99686ea819e58ee30348e7756cb0418a9f6

    • SHA512

      b98246e889c0979ed688ee0fc97ee26576c366b3371c2aabd71af0e34b0b91944d18e09faa2544f2ea837b2705b47a12241227ff3966c84c78b73f9d01441159

    • SSDEEP

      1536:GmFjTQ2AQV6j/7t7D6OIbKMgMPIRSPOdBSZuJpMK75Z37Xt6:Z3FV6jlf4VPXOdBSgJpMKVlbt6

    Score
    1/10
    behavioral21behavioral22

    • Target

      Flight Client for Cracked/natives/libmfxsw32.dll

    • Size

      15.4MB

    • MD5

      6980f97a2a92dce04c5cce88028bd160

    • SHA1

      e5d5daf7b8ce47bd2ecbc34a28357d5a16f7262a

    • SHA256

      39aa5129f3e61473de411a3e286a8ab2a410436923bbaa9320610de30ee1df5f

    • SHA512

      954b75290c1223fd9652389b16f24dd7e5ed4bc1028b1be857c555248eda8b8b1c6414d36af529dec82adae303bdbc2138fa735f0d31a009bb415347756a32d9

    • SSDEEP

      196608:JdsQK8Wj/go87dBJA+qsIX0DSFzFveFVlNSmfJzPmFpfaGUaDHxnQ7doP5hlt1Ya:PeV8o87dB30B1lti9q

    Score
    1/10
    behavioral23behavioral24

    • Target

      Flight Client for Cracked/natives/libmfxsw64.dll

    • Size

      19.6MB

    • MD5

      29bc29f7c4116ed33810a85c7de74532

    • SHA1

      034e6cd4ccfb319fe18007151cbe661436661ab5

    • SHA256

      b5eaa1918ffbdcdfaf91a4895dac20b6325a9f53d20f343b7e7f05ff95c9aabd

    • SHA512

      9413ee1260c2eb758efcf32b5531e334d459542bb38164caf02aee93915eaafe33ff4f9ff4bca4b63081777cda9344ae81e365d82906d51dc0e9511dacefa084

    • SSDEEP

      196608:3QSvzp6YCFanvMwgVIzEcTNFkvQkSWDl5WRzu:3iG4cUIDRzu

    Score
    1/10
    behavioral25behavioral26

    • Target

      Flight Client for Cracked/natives/libmp3lame-ttv.dll

    • Size

      385KB

    • MD5

      c46dc87cc8a8c039eee8fcab5546e92f

    • SHA1

      fdbcf56ebcd8f7ab65ab4b2d68d4cd0103967274

    • SHA256

      eca35fb48a83a4566f84df8dfa4667e36bd25d6074751dc2b289ab71b48fc7ef

    • SHA512

      46593b8e1972d7a33edbf72809e7f39439211ebc40ea0f53337900e8e8b2441a28d6aa7c888720745d5a4fc46a22d04a83d9c882c5583b5c0df67a2afe05e58d

    • SSDEEP

      6144:Yh4dNnIKRNAAwRXpoi7XOGIDy6yF9iPvctwxxaNaXNvR4:c49RNANRXpoibOGIm6yAcKvaN+tR4

    Score
    3/10
    behavioral27behavioral28

    • Target

      Flight Client for Cracked/natives/lwjgl.dll

    • Size

      299KB

    • MD5

      2644c73a80eb9f9fb7f81a2a5e546642

    • SHA1

      6f1661fc6952312a9f34dfa6d3840b46e9c85e63

    • SHA256

      fff711369747e9bb3656d4c5bdee7051bbc13f30abd634418bf40706a25f365c

    • SHA512

      b67cb978b780fff10df8e610b722b81f7b68168bf4510cfd9406c65182703d8f42fc88820861e73f78ba75cb70d2f29c6b0978d7a02b0d196699c2650d869ae6

    • SSDEEP

      3072:zd8I6dvi/byiLxRfg6p2ykoDYABr2JFcLN9Z5S0QoY6Pw5W+LMm002eunkmKq/XD:zqrd+DT2gLN9HKlmKqz

    Score
    3/10
    behavioral29behavioral30

    • Target

      Flight Client for Cracked/natives/lwjgl64.dll

    • Size

      310KB

    • MD5

      0b9fcfbd6d44e4d83605cc35171668c8

    • SHA1

      f4013116d6750829851370ed19a9eaf8251ad6e1

    • SHA256

      ebdcedbc3e24b911aacd7bb666ab426397ca7d7883a8d4e3cf28946041c95425

    • SHA512

      e920e284f47f888d10cac45ec8775e58481f5a8c2316d3fa01ff1e7b1bb63c64d2d0850b2da8fd040727b969d3b3f9b85afbd86b6cbfaecca580b853a1499f59

    • SSDEEP

      3072:Jy6nSomUPQukwpSor62AIiGYIR2LGPHc0Ul+S4KQdw6tqYKVFlCh7NZqSEgbh:JciFkwpL2DI0yPHTw6tVKYr

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks