Resubmissions

02/10/2024, 02:36

241002-c3x8xswgph 7

02/10/2024, 02:35

241002-c24djswgle 7

General

  • Target

    LunarEngineSetup.exe

  • Size

    20.3MB

  • Sample

    241002-c3x8xswgph

  • MD5

    1e127e16166f6acc05b433f5c151af2e

  • SHA1

    2e763303c5bf1969dd412d77452ffa7a18c52b8c

  • SHA256

    a8a84632f43da3e7feb8b4d64580daa17d92fcb09974770bf5f4492e46ca2125

  • SHA512

    2797915d0cb78178a75356fc790929905bde59ccf2f4ade3e23c7b9851926abbe3d30c3479569fefcdf3ea89522c9050c44638b032b76f57771d767050fedbf6

  • SSDEEP

    393216:h4IffuuxDS1fDiq5jUcUgPeyJ7o48nG/qQ6o+1BbwmdsUywobkCT+:h4IeuFSDPvUCbJk48G/D/OtFyed

Score
7/10

Malware Config

Targets

    • Target

      LunarEngineSetup.exe

    • Size

      20.3MB

    • MD5

      1e127e16166f6acc05b433f5c151af2e

    • SHA1

      2e763303c5bf1969dd412d77452ffa7a18c52b8c

    • SHA256

      a8a84632f43da3e7feb8b4d64580daa17d92fcb09974770bf5f4492e46ca2125

    • SHA512

      2797915d0cb78178a75356fc790929905bde59ccf2f4ade3e23c7b9851926abbe3d30c3479569fefcdf3ea89522c9050c44638b032b76f57771d767050fedbf6

    • SSDEEP

      393216:h4IffuuxDS1fDiq5jUcUgPeyJ7o48nG/qQ6o+1BbwmdsUywobkCT+:h4IeuFSDPvUCbJk48G/D/OtFyed

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks