General

  • Target

    LunarBETA1.3.rar

  • Size

    15.7MB

  • Sample

    240603-lw8whsaf51

  • MD5

    4874c36de966ad9f243575f3d21fe44d

  • SHA1

    a83de61b9de2a437e9bbb7174d48e7c7be0a9090

  • SHA256

    4e42ce4924cdd62319f93f0991c1eb047d135d5bf9259c445ec4652be7448f21

  • SHA512

    cf2cefba53bf096ac2e0a6a1f8676bdbc6ec1781fd7e17057d9e019d8559a0538a9f08c852339a7ab3c98c886a56a6088cedaffac3a4fe447a7f76c36d0df78d

  • SSDEEP

    393216:hgRcAupIUf8dg+RcAuNuUG3q0btiTBzaF0O:ZpPf82NdG3q+2BzQ0O

Malware Config

Targets

    • Target

      LunarBETA1.3/Monaco/fgd.html

    • Size

      18KB

    • MD5

      a1416c1fe209f7687ff79ab44301b3d3

    • SHA1

      3ba3ff0027a98128edad78f5561cef53c4236791

    • SHA256

      a6897302dba619dd3c156d57fc4b706662bff4df582975c33478b7878b060d2c

    • SHA512

      ce8a9aaf7ba903dfb25df53e04addfedae7ee4fcd07dffd42abf3f275a75b14cb26bb64c9320fd425003c73618b2967bb7be2cfb849050d50dd5308e69842f79

    • SSDEEP

      384:fihTARA5Lmwl1qPeVvW4NVtabVBJjVBd+TI6noaQLR7:fihTjoy+StabVBJ/kkgoaQLR7

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

    • Target

      LunarBETA1.3/Monaco/fileaccess/index.js

    • Size

      4KB

    • MD5

      36076c2f9ed15bf717b1c25ac393cd1f

    • SHA1

      33fdfa81edda4e15e508de82b961cf7a7a61ec09

    • SHA256

      4d5fec3e097af1243af2c83a8e30345177f32742c730d88ef9b12999c0cf66d0

    • SHA512

      2805ef0815ba159bd1f6c8e5c93281ba1c3f10ead8b3f274f6bf165fae87b628ab40079d78c6c4cd103bcee5d177ce7b24da39e1b9775d5f62e2bf10e38e1f04

    • SSDEEP

      96:gFEuLu1uPwXg2CxYAvh7yfWX+DWFq8iT9:4EMe3CxXyfWmWy

    Score
    3/10
    • Target

      LunarBETA1.3/Monaco/fileaccess/node_modules/.bin/mime

    • Size

      371B

    • MD5

      7ab5bfff58b0a878a4614cddbe424702

    • SHA1

      e75ad406ef2f9fcb1a9bde44ba669f416c824c4f

    • SHA256

      394b93eaaac25f18a20d7cdd80920ecca1fe43c8e5b37501389e644944c6e01f

    • SHA512

      36f59fb7f2a1f985210ce39fb90e6e7998e4ba8030f172496eda22a12c66b58c651211d0f682c2b0ec58a6e1ae19d59380d1fe0c6849f15fcf381df60123aaeb

    Score
    3/10
    • Target

      LunarBETA1.3/Monaco/fileaccess/node_modules/.bin/mime.cmd

    • Size

      316B

    • MD5

      2872347ac99221152281bfd56705d437

    • SHA1

      83fa66cd05f64de1ef7f3010344a0f7babe54819

    • SHA256

      cd5ca2f059e780c0a4b1aa9cdd6edc7dc10413d30bf51ad537adbd428e5e7a16

    • SHA512

      3c0b9e12bc1ff8f2bbaa5301d8db78a5c3636dd93f5755728e5b255c4250c0ea9e3c53a545011087b9c2536b1c1676ff01f7eff3015e6e99f2e12c9f15386fe5

    Score
    1/10
    • Target

      LunarBETA1.3/Monaco/fileaccess/node_modules/.bin/mime.ps1

    • Size

      769B

    • MD5

      bef04abf08e89532a476c3e474b5f509

    • SHA1

      bb81073d8e07c483ee29121358871535973336e7

    • SHA256

      a43d8b7d57dbbb21f2f98c331970d011177fa1c6be327aa0dbb84c1ad01e9201

    • SHA512

      e20f86c40ce523477da136cb4aa3f29683dee567a31ebfad666666192417f49568e848cb8844e8dcd32d5501fb7176d47aca54c195324e6d41e73093699788b1

    Score
    1/10
    • Target

      LunarBETA1.3/Monaco/fileaccess/node_modules/accepts/README.md

    • Size

      4KB

    • MD5

      873e624d40d23cf9b54f9d2f74d2c8d1

    • SHA1

      3a884510d2eeed73a4cd5ae0947a6c72cd3c7426

    • SHA256

      c25a1071e5aa1b1b43e10f083e8d97c3dbf1f7700cfa38b5cbc40725662e1ae0

    • SHA512

      a929edeb59edc6f1ef4f7554ddfd0b1b54aa097d4fdf69c5ec25b14c3c722a034d159daf3ad38508efc775fdf8c246507d53021e4ad79f0708c5df94b311a864

    • SSDEEP

      48:ZdC9AIvI6RZK0nwuBGWxGWwsNdXMoNjP601Wrk0aN8F07DaN89JC7aN8fBfuRhpL:/CnQl0JZ15jue/9IQxokXjwiA0

    Score
    3/10
    • Target

      LunarBETA1.3/Monaco/fileaccess/node_modules/accepts/index.js

    • Size

      5KB

    • MD5

      4fe4d2c90a2fd19d6e97443a7d24f815

    • SHA1

      282263f45f6bf80fbf43f4097d53b5b60ff1a05f

    • SHA256

      be2decbd50610e8f995c1e312ee4dd6d7c1244cfdf03ee4c4a3da68e572dada1

    • SHA512

      c795b7285cc92616a46fd1ad2d00ce65fb4b269e6b6fc35315891d119b7c25b7f4573540be0627d577123201d9cfe119c8a53f0e75a8b6ea870f8d89a130c213

    • SSDEEP

      96:oYG1MGmGHqyl8rAyBkmqFxo+uerpDWMlB8fdOGUJTit4UG9bCZhPwA:oYG1Xlqyl88yBD+uerRLD0YQ4rcZh9

    Score
    3/10
    • Target

      LunarBETA1.3/Monaco/fileaccess/node_modules/array-flatten/README.md

    • Size

      1KB

    • MD5

      328fdaf1ee65869341567f4fb6716e02

    • SHA1

      98efa9e4bd6d6bca4ebb76991a2187a8a496c8b6

    • SHA256

      071dd896356da12269508f361958ec622e47b27a96d7efdba23b671bc3470416

    • SHA512

      40378eeeb21474e8be2962853b1d279ab8e167e68ebad08ae4e7932c131da317672852916bcc1000ec43a0163653c45158a9a8be819b4a6479163ac8c5391ca5

    Score
    3/10
    • Target

      LunarBETA1.3/Monaco/fileaccess/node_modules/array-flatten/array-flatten.js

    • Size

      1KB

    • MD5

      4b17fa06c54846b686b8b799e9dd253a

    • SHA1

      fc6cc30e8b8ec09eeba62bac076ed627aa3ee8d1

    • SHA256

      766ca145b6d25e3d60f352a716e8fa1876bcdf362c0767c360cf24f335bc281e

    • SHA512

      72df1668f464f6942c484155b667086bb6f83f77e826ffcd146ee045079db3334aba270bffb66cdd796d4c9308121ec2a67a404289f19914c45d9a6c15435e71

    Score
    3/10
    • Target

      LunarBETA1.3/Monaco/fileaccess/node_modules/body-parser/README.md

    • Size

      17KB

    • MD5

      3152126cd7d54ede5697046e69a7e589

    • SHA1

      3c8820c682cc2e043465d9aafbe1e182571e941f

    • SHA256

      1a8c31593d425887df10e400a765d3f86f3b195b4efdccd44ff4aa542c03380b

    • SHA512

      73b3c1fa28e96f744e7e6a58a13d6c5b31646cf06fe47895c226ed61198c5c2bcd4a2dc0c4447de54ea15d5d56d7e330ad1335b3659598cc576a88e791c16358

    • SSDEEP

      192:eBmKv7ygazeyidkShRvtlgem3x1A6H9wSu9kYPaDpIQVf3X/R0yV2aaX2JC/vuZA:xKFO4d/63TA6H9i9bSDKqvXpqmC

    Score
    3/10
    • Target

      LunarBETA1.3/Monaco/fileaccess/node_modules/body-parser/index.js

    • Size

      2KB

    • MD5

      b9e991c0e57c4d5adde68a2f4f063bc7

    • SHA1

      0cb6b9eb7b310c37e5950bbcaf672943657c94b5

    • SHA256

      9c6c900e7e85fb599c62d9b9e4dfd2ea2f61d119dce5ed69ac3a8da828819241

    • SHA512

      3bbd31eed55c32435b01fe7356d39749e95f8f49222115ada841e751ad36227e6f427efdc4e8bad36d8ccd37c2e92c01fa67c24c23f52023df8c1e1be1a3b4f6

    Score
    3/10
    • Target

      LunarBETA1.3/Monaco/fileaccess/node_modules/body-parser/lib/read.js

    • Size

      4KB

    • MD5

      c148bb38c59ce266e271c96ab1f2d192

    • SHA1

      027f3fbd8a5370ddec744d33ec9d594db41f6293

    • SHA256

      1e9e274755366c39ae70e8b9a7a42fc12219566e67efaf9b7ebc2a8b337f5b6b

    • SHA512

      bc4779cda1a3b130eb8cf76bb40676046ceb514ddc5c1891d7324776e6188e5d5ceb4c0799cf2fbc007786849ed07903cb59f61ffcac407300eef0a16cb7c498

    • SSDEEP

      96:1F2ISKMGJ0n9WbOaHSb+IR1+GFQBnPQCbfkZ/OPqgVB9OuCyMQ:1FwZYbhHSb9R1+GFQBICbfkWVBqlQ

    Score
    3/10
    • Target

      LunarBETA1.3/Monaco/fileaccess/node_modules/body-parser/lib/types/json.js

    • Size

      5KB

    • MD5

      6b036408f968978bf9668496db9953ba

    • SHA1

      af1f14428152576f1c047c3462d26a7feb98635a

    • SHA256

      44f8b529333004e2aaff6db3a1dbe7068f1ac5fa1173e9634686a78c2262af35

    • SHA512

      89bef97d3d5d0c8da0f3aa1e178fee1d04eee5200c2f037bd55761a61e6c6a251f7314e82343761ef227a997909f4a0237a3ff5f79a1a7bb9e879a465ab84f86

    • SSDEEP

      96:1F+Graz+dz1PbSDp2qjlvqzi+QBYwxcG5l+NbkAZiVl7g6A4QYSR:1F+Graz8TUj0mx+wOgybriVZg6ffSR

    Score
    3/10
    • Target

      LunarBETA1.3/Monaco/fileaccess/node_modules/body-parser/lib/types/raw.js

    • Size

      1KB

    • MD5

      acb38e4fe575afaf8d1a257e47c6e362

    • SHA1

      ea7411ff5a71df8d426322d07103e5894630e29b

    • SHA256

      4e9cc80a7ee8bd667c68c264b4c374b28e731246ddb6ec22c3968daf837e30a2

    • SHA512

      157427ad25390339b045b9bb81753709498b69b2cc8b9c918c19d52d1cb4f6bbe5b6b07885d0a7f66ef359b7080dc9a42216f71911b08ade04c1a112192bff50

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

blankgrabber
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
6/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

Score
3/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10