07266653b14ff50a02d0be770e90e102d766cede26e92bd43eb61255c5931fca | Triage

Resubmissions

05-08-2024 19:24

240805-x4v56swbrp 10

03-08-2024 05:43

240803-getytavdrk 10

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
05-08-2024 19:24

Sharing

Report Analysis Logs

General

Target

Moon Predictor V2 (1) (1).exe
Size

14.2MB
MD5

11afed49123fd774af33550dae13777a
SHA1

f02c2409c589f76a1639cef002dda5f7f538e98d
SHA256

07266653b14ff50a02d0be770e90e102d766cede26e92bd43eb61255c5931fca
SHA512

303d1eae5e242b0c831bf235705e57d0cb92c65387d7fe7279da364100f402c2212f48972cb6dbb64c951c704ebbd7af2081164bc8884b79064d2ba15e16fd55
SSDEEP

393216:Hu7L/qdQusl7Q+q9RoWOv+9fav+NNxDnDz:HCLydQu2QdborvSiv+DxDD

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2984	Moon Predictor V2 (1) (1).exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1916 wrote to memory of 2984	1916	Moon Predictor V2 (1) (1).exe	32
PID 1916 wrote to memory of 2984	1916	Moon Predictor V2 (1) (1).exe	32
PID 1916 wrote to memory of 2984	1916	Moon Predictor V2 (1) (1).exe	32

C:\Users\Admin\AppData\Local\Temp\Moon Predictor V2 (1) (1).exe
"C:\Users\Admin\AppData\Local\Temp\Moon Predictor V2 (1) (1).exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1916
- C:\Users\Admin\AppData\Local\Temp\Moon Predictor V2 (1) (1).exe
  "C:\Users\Admin\AppData\Local\Temp\Moon Predictor V2 (1) (1).exe"
  2⤵
  - Loads dropped DLL
  PID:2984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI19162\python310.dll

Filesize
4.3MB

MD5
deaf0c0cc3369363b800d2e8e756a402

SHA1
3085778735dd8badad4e39df688139f4eed5f954

SHA256
156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

SHA512
5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

Download Submit