General
-
Target
Luna-Grabber
-
Size
339KB
-
Sample
240528-vvfysada2x
-
MD5
8adb4f5b01757280c4da185751237a07
-
SHA1
77aaec4206d8ac99d74d80eaa540e5fcddb080b5
-
SHA256
bcfe332844e3a2e51645b120aa90fd741ef78378bba562e86135642ec26e9a58
-
SHA512
78692c18ad339fc04532dcafbbcff94c0c382ed7d0fc7d2509957e561be05e69dc37376eca01b7bc2635dbac9b14f633cc9700a4248210fea39be8a4e90bd9a3
-
SSDEEP
6144:E0oGO2n9ddKM2vkm0aWyRv3j9WvZJT3CqbMrhryfQNRPaCieMjAkvCJv1Vi0Z23u:BoGO2n9ddKM2vkm0aWyRv3j9WvZJT3CV
Static task
static1
Behavioral task
behavioral1
Sample
Luna-Grabber
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
Luna-Grabber
-
Size
339KB
-
MD5
8adb4f5b01757280c4da185751237a07
-
SHA1
77aaec4206d8ac99d74d80eaa540e5fcddb080b5
-
SHA256
bcfe332844e3a2e51645b120aa90fd741ef78378bba562e86135642ec26e9a58
-
SHA512
78692c18ad339fc04532dcafbbcff94c0c382ed7d0fc7d2509957e561be05e69dc37376eca01b7bc2635dbac9b14f633cc9700a4248210fea39be8a4e90bd9a3
-
SSDEEP
6144:E0oGO2n9ddKM2vkm0aWyRv3j9WvZJT3CqbMrhryfQNRPaCieMjAkvCJv1Vi0Z23u:BoGO2n9ddKM2vkm0aWyRv3j9WvZJT3CV
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Adds Run key to start application
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Legitimate hosting services abused for malware hosting/C2
-