6aceeac6f374351f34b9cd3fa36198ca5b6835b83f8c8433fcfd1c2ffb13a6b3

Analysis

max time kernel
363s
max time network
364s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
03-07-2024 15:02

Target

Luna-Grabber-Main-main/builder.exe
Size

19.8MB
MD5

95419e62271175d0d3b3306b0befffb3
SHA1

e5a126c4d582372385212d804658056651599d95
SHA256

394a76cae20c6d644a5f9a12099b48ee2058f6b03ff3f83805bb5d078248cb8c
SHA512

5d2de343eb27d2bc471f7368debe98665c07a3a1a79ab2e2b084312f807db07697aa3f3a79b1b683c54b364020f012f812a8018fecf08419011f6945da4771bf
SSDEEP

393216:MQtstvdqJr7M5liAdQJlOwF3MnG3otl5cGaABo1edW3zCd1Z5Z:MQtstVA7M5lndQD3MGYNjbCOf

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2516	builder.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2420 wrote to memory of 2516	2420	builder.exe	28
PID 2420 wrote to memory of 2516	2420	builder.exe	28
PID 2420 wrote to memory of 2516	2420	builder.exe	28

C:\Users\Admin\AppData\Local\Temp\Luna-Grabber-Main-main\builder.exe
"C:\Users\Admin\AppData\Local\Temp\Luna-Grabber-Main-main\builder.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2420
- C:\Users\Admin\AppData\Local\Temp\Luna-Grabber-Main-main\builder.exe
  "C:\Users\Admin\AppData\Local\Temp\Luna-Grabber-Main-main\builder.exe"
  2⤵
  - Loads dropped DLL
  PID:2516

C:\Users\Admin\AppData\Local\Temp\_MEI24202\python311.dll

Filesize
5.5MB

MD5
9a24c8c35e4ac4b1597124c1dcbebe0f

SHA1
f59782a4923a30118b97e01a7f8db69b92d8382a

SHA256
a0cf640e756875c25c12b4a38ba5f2772e8e512036e2ac59eb8567bf05ffbfb7

SHA512
9d9336bf1f0d3bc9ce4a636a5f4e52c5f9487f51f00614fc4a34854a315ce7ea8be328153812dbd67c45c75001818fa63317eba15a6c9a024fa9f2cab163165b

Download Submit