Overview

overview

7

Static

static

7

Lunar Clie...er.exe

windows7-x64

4

Lunar Clie...er.exe

windows10-2004-x64

4

$PLUGINSDI...ics.js

windows7-x64

3

$PLUGINSDI...ics.js

windows10-2004-x64

3

$PLUGINSDI...nds.js

windows7-x64

3

$PLUGINSDI...nds.js

windows10-2004-x64

3

$PLUGINSDI...ies.js

windows7-x64

3

$PLUGINSDI...ies.js

windows10-2004-x64

3

$PLUGINSDI...ate.js

windows7-x64

3

$PLUGINSDI...ate.js

windows10-2004-x64

3

$PLUGINSDI...der.js

windows7-x64

3

$PLUGINSDI...der.js

windows10-2004-x64

3

$PLUGINSDI...ils.js

windows7-x64

3

$PLUGINSDI...ils.js

windows10-2004-x64

3

$PLUGINSDI...ler.js

windows7-x64

3

$PLUGINSDI...ler.js

windows10-2004-x64

3

$PLUGINSDI...ate.js

windows7-x64

3

$PLUGINSDI...ate.js

windows10-2004-x64

3

$PLUGINSDI...ler.js

windows7-x64

3

$PLUGINSDI...ler.js

windows10-2004-x64

3

$PLUGINSDI...ate.js

windows7-x64

3

$PLUGINSDI...ate.js

windows10-2004-x64

3

$PLUGINSDI...ler.js

windows7-x64

3

$PLUGINSDI...ler.js

windows10-2004-x64

3

$PLUGINSDI...ate.js

windows7-x64

3

$PLUGINSDI...ate.js

windows10-2004-x64

3

$PLUGINSDI...ler.js

windows7-x64

3

$PLUGINSDI...ler.js

windows10-2004-x64

3

$PLUGINSDI...ate.js

windows7-x64

3

$PLUGINSDI...ate.js

windows10-2004-x64

3

$PLUGINSDI...ler.js

windows7-x64

3

$PLUGINSDI...ler.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Lunar Client - Installer.exe

  • Size

    2.2MB

  • Sample

    240822-a34plazapf

  • MD5

    b7cfaaaa9e92f08c24b9f526430e5554

  • SHA1

    7a3344be02fd6bf7bd300bf3961d19a2372775f5

  • SHA256

    9540b5d24d35d9026b703de898515b319e224a2d44f095566927acfabf8d0b25

  • SHA512

    54241f0a61e0904cca299c5a9298dbf88730b2a6e4f9ea8718fd0597d1db223b4505c68a750d543adfae8b9f28b720a444db0b1cf6571f5c9e203e56a1771551

  • SSDEEP

    49152:ymACyWxE87vxpsrFpIv928RtBLMNXl0q+ssY5NkhDr6brcU:yhCyIPN+TIvMGttcSq+eAQ

Score
7/10
discoveryexecutionupx

Malware Config

Targets

    • Target

      Lunar Client - Installer.exe

    • Size

      2.2MB

    • MD5

      b7cfaaaa9e92f08c24b9f526430e5554

    • SHA1

      7a3344be02fd6bf7bd300bf3961d19a2372775f5

    • SHA256

      9540b5d24d35d9026b703de898515b319e224a2d44f095566927acfabf8d0b25

    • SHA512

      54241f0a61e0904cca299c5a9298dbf88730b2a6e4f9ea8718fd0597d1db223b4505c68a750d543adfae8b9f28b720a444db0b1cf6571f5c9e203e56a1771551

    • SSDEEP

      49152:ymACyWxE87vxpsrFpIv928RtBLMNXl0q+ssY5NkhDr6brcU:yhCyIPN+TIvMGttcSq+eAQ

    Score
    4/10
    discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/app/js/utils/analytics.js

    • Size

      4KB

    • MD5

      525281e9959af4c1c0d11b9243c798a1

    • SHA1

      237a84c5b57bd132f48446d718b20640cb28c263

    • SHA256

      c37f0699cf8ba7d9e3e0f73f1b2af65f4bdc2a31f44594ffc8c73e98b6c2fd1d

    • SHA512

      fe5bafda7773e69c65dd63270e0306abcd39cb2d886b675ab8c714ae0833efde963b69623d468551a1ab37f1db1a1d457f1568f7a29d9cf0bb23bb0edcab5fc4

    • SSDEEP

      96:LlYkmHqqVHlnZ4JGvt+QP2EvVVko3sO2LCgObNS1Tgzalh:AHq1GV+kcRObNSGza3

    Score
    3/10
    execution
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/app/js/utils/commands.js

    • Size

      13KB

    • MD5

      a25b49d085333ece9aadd1f285795925

    • SHA1

      53341dcca297a969a8ff37265935488f1790307e

    • SHA256

      acbf59ce6aa668880f65aab2bfe62305415c76301b40bc7f72777f0b08840b71

    • SHA512

      0a2cb6f4e1af0c4205e38ba1e12c208e6ea4f8f8e3956c9d10b312aa9a6929b99ec967aee7aa1f54da97ca6ea354f8bd7f624359cfd05c6241a5f4bf59843b68

    • SSDEEP

      384:PUr5HB8c31uUvJQ006W8tusv5qEWOddSd:PVhs0

    Score
    3/10
    execution
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/app/js/utils/cookies.js

    • Size

      1KB

    • MD5

      6c60e675f8c8c68c0174b644d3a63a2a

    • SHA1

      3635a3fe07ccc4a6f33a986ddb690522d0611abb

    • SHA256

      9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287

    • SHA512

      1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452

    Score
    3/10
    execution
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/app/js/utils/modal-events-delegate.js

    • Size

      1KB

    • MD5

      117e4fdbdb0ecf211c8bd909efd337d1

    • SHA1

      9f8684d856b7c95bdffb139217dfd89f41373187

    • SHA256

      267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857

    • SHA512

      f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1

    Score
    3/10
    execution
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/app/js/utils/strings-loader.js

    • Size

      5KB

    • MD5

      9c94eb933d8a43dd3825e67a7e30c980

    • SHA1

      7ec7b16af6f399219209ba5967d377040486a11b

    • SHA256

      96445709fde2613af50f4b8908296d4bfccdccb2d9db9febc34a9bf4dcc70ecf

    • SHA512

      a662a299e31633f71a9b9675970359430fdac06dcc284fd7ce92919f244c7f921639f97a42356e993a95865e6c9f198dcba82c126f82065bf2009a31ec9b02f5

    • SSDEEP

      96:FXS/WSBWlbBtDhWFTnTeWsNkEj1I/6WfwkUlx416moPdXDKP8j8yZrME6:FXSuQwBBh0nTevNkEj1O6Wme0muXDK0W

    Score
    3/10
    execution
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/app/js/utils/utils.js

    • Size

      118B

    • MD5

      a0952ebeab701c05c75710c33d725e7e

    • SHA1

      1da8a2e889f1213d481ae3cd5571670c01e64adc

    • SHA256

      b4f0c48cbfeaf8141fd44b12031e3f0410cb0cdc313888ffdb14fdf1d2341246

    • SHA512

      5e5ae616d3fded7d2bf47a326242c4477ca3119fb52897bfb41de0be230ccbd6c3da2c00268b3973e9bf7b4f2886aba64fd9719b448662e4130ee66d87913389

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/app/js/windows/cri/cri-controller.js

    • Size

      3KB

    • MD5

      4e4b4a9e2d86ae3c108105078db6d730

    • SHA1

      826946be793c999316af6c1db10523950b18ea2c

    • SHA256

      cee7fc5a36a01a439125be031923d7e7415ec56194255048098169a0108034b7

    • SHA512

      1420065cd000ce9b9c39d27b5dc5f4055f67146e06573a03184649851c9745f0c0af2b5e35b41b5923703dd74e32f9ed95fc59a43db25f854584e319950beffe

    Score
    3/10
    execution
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/app/js/windows/cri/template.js

    • Size

      1KB

    • MD5

      76c1ef0cb437db144c2bed53a5a8a5d7

    • SHA1

      aaab8fff649f8e46d1e9510018118ee9abe01498

    • SHA256

      505d3c4de7d9cf8f0155b5b1a3c8792bc0ca2eda6781b441bd85455f144be22e

    • SHA512

      822bf9feda91c89539d263c6c9053163e8dfa3c511195bc61a9b608b4687fb4048733323f03dd30a7ab661a4be4acf6c8d8ae7bb6723771122540a9551899c3e

    Score
    3/10
    execution
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js

    • Size

      1KB

    • MD5

      eb6d6bd7e05d4477e2704dd87b57ca35

    • SHA1

      f42672ec1e23a3f4bcc2952746d87ba8deff44be

    • SHA256

      5ca97132a258ed1f36e401d70ccb95be2c9e18395e6010c40f61172914477de5

    • SHA512

      1402d611f910cf5078e804175fa4693b591348d3e7cf6d0a6bbe026c259eb9e0bc285233c80cb2f4690674c3e927bc72fbdcbe758826b98fd02ecb3ed82e339a

    Score
    3/10
    execution
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js

    • Size

      681B

    • MD5

      d1cb34b57cef7e28b9286454b197b712

    • SHA1

      f3a964b319bab82d4eda07e126bbfd6dec35c349

    • SHA256

      b61dfc304b46e8cd95d7b15bb93c6160b30523a1a093397a84fc8b8bed00ac42

    • SHA512

      3a07de9c58134edbb7998f85e6d037a0cd066e32c4daa07594a949a7574f5693153bbcdb59739e1a92e847ab1128e2369fb30ba76a7b9cdfa9a37a409db691c1

    Score
    3/10
    execution
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/app/js/windows/finish/finish-controller.js

    • Size

      1KB

    • MD5

      138240ea22084428e9e25583e9156568

    • SHA1

      e8bef7eab5b6e7040b996ec9504436e073444bd9

    • SHA256

      4cb4e1aa25c15ae5f2e63fa4658a8acff0ce63e0f59cb6eb634df2dfe336e2ec

    • SHA512

      e97b81b0ecd964e6e909019353efe4f5582f65763ac4197d754f1c4eea19cfc249900ae597fd33e29f531bb0d1c7e0f010793c59a2b0099fa75ad0b7d01ce8a7

    Score
    3/10
    execution
    behavioral23behavioral24

    • Target

      $PLUGINSDIR/app/js/windows/finish/template.js

    • Size

      1KB

    • MD5

      f092de7ea66d8e920b345f38537fa35d

    • SHA1

      82d107a409f18878307ae0cefe24074db64937c4

    • SHA256

      b05f111369e12ecb4cdc6526dd554061eb31097aa0de4bd126ddc185b69d922f

    • SHA512

      14942c0122f216c07595cbaae498f9c4d37a2d0fd95f262c332502befdf4566c7a042c4d85702c1d82a111123dde677096195e9efeb1d74eb1dfd4df84d01a23

    Score
    3/10
    execution
    behavioral25behavioral26

    • Target

      $PLUGINSDIR/app/js/windows/main/main-controller.js

    • Size

      11KB

    • MD5

      15b665a5c915004e1aa7e9e11a710f7e

    • SHA1

      7821924e42bb19d60c572ff80bbaaa04d7aaeefb

    • SHA256

      84dc33e2eb3118fc77a38b0ca53af42c53f6eb85cfb1e8737dbe39fa03515653

    • SHA512

      dd47f7bac0dbaac714e6d2fc91b4c24756ca4acb70bdbc4b54cd5216552d6bb85ba2e1c3c8445c5fb40d116dfab6569945cd74730bb7c8f3cf46e8d08f8afa02

    • SSDEEP

      192:28RRXC9xThFzkzLZ1ksEIA6li5djpACga0U2FxVgMKV59GsZydwOVTzdfj5UEdwV:2sCHTTzkzLZhJit+y3ZydwKf6

    Score
    3/10
    execution
    behavioral27behavioral28

    • Target

      $PLUGINSDIR/app/js/windows/main/template.js

    • Size

      3KB

    • MD5

      a118c7724c208f12083240cafccfd10b

    • SHA1

      f89c676a215b869626737862a08c9eb07d440211

    • SHA256

      63a43bb08403972d0f4b0e381bd264af14e826e0035242bc1baa9a815956b8fc

    • SHA512

      9fede79044ae5de7baf5bfba0d5a515ce462a25420026ff45bcf1751e57510023cb40df42d08e880114f62b38ddb218355d5357b725df32a41ae4e6a18414cb3

    Score
    3/10
    execution
    behavioral29behavioral30

    • Target

      $PLUGINSDIR/app/js/windows/modal/modal-controller.js

    • Size

      2KB

    • MD5

      b04bdfd1c7d09bdbdb94a2455fdd677b

    • SHA1

      f000ba4866ff16d75bfd6cf446763498e19b12b1

    • SHA256

      4565ee81ffe222b31982088b1c18850076e3acf59198ebce08118e12cbd87ea1

    • SHA512

      3cb6ef0a16309046e7f407e7321eb12212b0eec09ec1a04b1d813f6c7a04546714865c3b398a93985041f598156ed905ebd23a64260801281b29ada9bc19ec5c

    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

discovery
Score
4/10

behavioral2

discovery
Score
4/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10