Lunar Release.rar
- SHA256 64e46e6863b3ba7f96922329112d82df37ebbfe9b538407fdb8ed02443a99a82
Overview
overview
10Static
static
3Lunar Release.rar
windows7-x64
10Lunar Release.rar
windows10-2004-x64
3Lunar Rele...ook.js
windows7-x64
3Lunar Rele...ook.js
windows10-2004-x64
3Lunar Rele....2.exe
windows7-x64
10Lunar Rele....2.exe
windows10-2004-x64
10Lunar Rele...ns.txt
windows7-x64
1Lunar Rele...ns.txt
windows10-2004-x64
1Lunar Rele...se.txt
windows7-x64
1Lunar Rele...se.txt
windows10-2004-x64
1Lunar Rele...ces.js
windows7-x64
3Lunar Rele...ces.js
windows10-2004-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Lunar Release.rar
Resource
win7-20240215-en
windows7-x64
29 signatures
150 seconds
Behavioral task
behavioral2
Sample
Lunar Release.rar
Resource
win10v2004-20240508-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Lunar Release/ByfronHook.js
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Lunar Release/ByfronHook.js
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
Lunar Release/Lunar Release V1.2.exe
Resource
win7-20240508-en
windows7-x64
27 signatures
150 seconds
Behavioral task
behavioral6
Sample
Lunar Release/Lunar Release V1.2.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
25 signatures
150 seconds
Behavioral task
behavioral7
Sample
Lunar Release/instructions.txt
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Lunar Release/instructions.txt
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Lunar Release/license.txt
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Lunar Release/license.txt
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Lunar Release/resources.js
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
Lunar Release/resources.js
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target Lunar Release.rar
- Size 4.6MB
- Sample240601-ew76nahf9t
- SHA256 64e46e6863b3ba7f96922329112d82df37ebbfe9b538407fdb8ed02443a99a82
- MD5 ea7b845d57eda7146ce88eed51a9bc2f
- SHA1 959300669d316151e9bd39006b68a51ca39c796f
- SHA512 3a41dd6f5205ebf0334259132146a1a0c5809866641ed68eb319f187918841b3c5e2d227ddace7486638d2f4f654a808f60d3c79cc3d29be13972d5738804e7a
- SSDEEP 98304:zly94hIbQ5eewqMCOn2dq0JQx1W3PGYwB0kpXsZ6hiWlg+Dux+KCGNr:z24hIbQ5eYYnIhKxpYwBLlhiWO+C+KC0
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Lunar Release/Lunar Release V1.2.exe
File Explorer
-
Lunar Release.rar.rar 4.6MB
-
Lunar Release/ByfronHook.dll.js 5.1MB
-
Lunar Release/Lunar Release V1.2.exe.exe 4.8MB
-
Lunar Release/instructions.txt356B
-
Lunar Release/license.txt6KB
-
Lunar Release/resources.dll.js 5.1MB
Lunar Release/ByfronHook.dll
- SHA256 7f93fef11819a9f4b8edd342a1c2d3dbab25698ed75f9713ee1167fa2f852331
- MD5 773b3b72481fd8ef9b62b5ef0fe8040a
- SHA1 a42cbc7aab88689e834c158b24af8722586cf1b4
- SHA512 db7d29100060afc909cbf20bcd6d9c02fc0b29d8ee32606e2d6cf18270484f2b46853cda0b495a85cc7a2e3ae4536030a25216f101dceabf2f972e3375208c38
- SSDEEP 768:+UI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUIn:3
- MD5 SHA1 SHA512 SSDEEP
Lunar Release/Lunar Release V1.2.exe
- IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
- SHA256 6a7eff69ef4f70f363c1585dedfbcd76708577e78e292c62203a758f8ae377b3
- MD5 8f92f2e13f44e95c08a3b3309e98a361
- SHA1 e2cb9a931b39cafbdcd974758638772b611e5d3a
- SHA512 42cdbd1ff0b58f6ea0ded8a1c27d62b75844138b65ba894127c1f5a117f8c1c876469bf3f3229986ddfcbf516037ac04a82180ad1e23ff4b93db917b7ce475b0
- SSDEEP 98304:MyavaC23Uv42uTXxFTtb9WgXjn93g6azHdIA2STGGp8lZnsJRkD:MykH23UvoTBpnXj93gTuAnG9tSi
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5293
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
msvcrt
malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit
shell32
ShellExecuteA
kernel32
SetUnhandledExceptionFilter
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.8MB
Virtual Size
4.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Lunar Release/instructions.txt
- SHA256 69dfd4f72063c3ffc2789c8a1e63f92fb5a7431c1a5fd5fc14f484c291452c17
- MD5 7fb0d7b731aae36613ea24931f0327b2
- SHA1 0d3c2649d320482a9d51a64bee88fcce1ea5d47c
- SHA512 70dc49f20225353ce93ed889bf597d2aafe1bd57bc93e280d5aab387f3ff1ebd80e80dd72319667e9253199ad6cbd0035c4c01e60d81dc8f0dee3ee7b45c5834
- MD5 SHA1 SHA512
Lunar Release/license.txt
- SHA256 a19d58aaab15c4d0019e569d1c073d1b5286fdd37dbeee7a58a7d1ae76045ae1
- MD5 0b09566254b011d989decf0e23a902eb
- SHA1 3ae5cd6be73daf418b8deee9c865cf78225838c9
- SHA512 4e22e58f925879306261e5993039e1d84d87f8fecc0f9fdad534da55b6fd22be77e622a4077d8d521f7734e5535f66853d581155987e2f3607e2d386938c218b
- SSDEEP 192:uEwjuKsgA4+XYdXjA+okS63vZBCSUziJm:eNs8+QRVxBRU1
- MD5 SHA1 SHA512 SSDEEP
Lunar Release/resources.dll
- SHA256 7f93fef11819a9f4b8edd342a1c2d3dbab25698ed75f9713ee1167fa2f852331
- MD5 773b3b72481fd8ef9b62b5ef0fe8040a
- SHA1 a42cbc7aab88689e834c158b24af8722586cf1b4
- SHA512 db7d29100060afc909cbf20bcd6d9c02fc0b29d8ee32606e2d6cf18270484f2b46853cda0b495a85cc7a2e3ae4536030a25216f101dceabf2f972e3375208c38
- SSDEEP 768:+UI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUI7yUIn:3
- MD5 SHA1 SHA512 SSDEEP