Overview

overview

7

Static

static

3

lunar builder.exe

windows7-x64

7

lunar builder.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46bf76952e82962e7d8b7141e6e32eec.bin

  • Size

    5KB

  • Sample

    240727-ca4j8ssdre

  • MD5

    46bf76952e82962e7d8b7141e6e32eec

  • SHA1

    4d1a781ce3d3cedacc2b718f87db932b306b6bec

  • SHA256

    3bcd80fb31da122d23f4335d0fbcf375608f2a4ce2226ae8e5bc21600b79e8d6

  • SHA512

    3a59e2ecbda4dda2211100f3f4fde32d29916ac50d170334e8686b311e221a4160bdbe15adfa278e8ddbf84a879909ebb722139b9dbb14fe1dc34baee27b6282

  • SSDEEP

    96:HAix84OI9w4xm1pvmmLeF8YTj+o4FVYzm8KvGVWgG+Hv+WN8JgRubFpvonSYtPH7:HAA84f9PmDuj+wzlnBG+H8JgRubrgVf7

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      lunar builder.exe

    • Size

      11KB

    • MD5

      c04347b84d3907b0062e1d016fbe0e18

    • SHA1

      ccdd3dc5eca071ead0c8477b9e632eba6fad8664

    • SHA256

      396caa1c054791df024413cbf3b905542179a945209343be23c0e28fde35efd1

    • SHA512

      fb1788b07430daf350324c006b7b98d73fdb8c1884ee02f8441f85792ad8f2bc40a14d290456bb9ad277e91e5191c86cda7db8d0c81e480173dcebf1a35a2738

    • SSDEEP

      192:xmD8kan6LTkKA+Hz0DSKvyzsDXQKZIMUAEQZ:xmD8HoV5om8yzszQKkk

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks