Overview
overview
10Static
static
10Lunar-crac...ck.rar
windows7-x64
1Lunar-crac...ck.rar
windows10-2004-x64
1Lunar-crac...ed.exe
windows7-x64
7Lunar-crac...ed.exe
windows10-2004-x64
8i:+��.pyc
windows7-x64
i:+��.pyc
windows10-2004-x64
Lunar-crac...er.sys
windows10-2004-x64
1Lunar-crac...k.1337
windows7-x64
3Lunar-crac...k.1337
windows10-2004-x64
3Lunar-crac...on.dat
windows7-x64
3Lunar-crac...on.dat
windows10-2004-x64
3Analysis
-
max time kernel
94s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
17-11-2024 15:19
Behavioral task
behavioral1
Sample
Lunar-cracked-by-wxcrack.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Lunar-cracked-by-wxcrack.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Lunar-cracked-by-wxcrack/Lunarcracked.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Lunar-cracked-by-wxcrack/Lunarcracked.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
i:+��.pyc
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
i:+��.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Lunar-cracked-by-wxcrack/driver.sys
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
Lunar-cracked-by-wxcrack/k.1337
Resource
win7-20240903-en
Behavioral task
behavioral9
Sample
Lunar-cracked-by-wxcrack/k.1337
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
Lunar-cracked-by-wxcrack/version.dat
Resource
win7-20241010-en
Behavioral task
behavioral11
Sample
Lunar-cracked-by-wxcrack/version.dat
Resource
win10v2004-20241007-en
General
-
Target
Lunar-cracked-by-wxcrack.rar
-
Size
14.3MB
-
MD5
ddf63fc13d9a0fdb12a37c79d8872e17
-
SHA1
34e5653001a40176637ff5a9e4addba3437120bf
-
SHA256
c6c414a0ffacb0fe53a8b61506e83ead35e21c5f42f902fa3a5f0a21e70796e6
-
SHA512
00f885aef2aa9d51df0bc2882c205038cd4387c7757336f282f3fa4fb8ce8fc3d921377db8d9fde6720cbf3d6bff17734d00447a214cd5c993578f3142961b63
-
SSDEEP
393216:egV/129gMjG5sDGEc58/NTZYZOBYXy2BO9SyQHh2hbdM:eG/1zMjCGGP8VTZYZIiy2BO9oHh2I
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
7zFM.exedescription pid Process Token: SeRestorePrivilege 1684 7zFM.exe Token: 35 1684 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
7zFM.exepid Process 1684 7zFM.exe