General

  • Target

    Moon.zip

  • Size

    10.5MB

  • MD5

    afdea462c07a140b63f6910a7b18e935

  • SHA1

    2bb124b1f6cbeb9126eab1f70561e6bd5a3642ba

  • SHA256

    c48b1d0562f49f921b34fa58c952a4dd991d111003c3543f8852fdddb0b0da4f

  • SHA512

    52a53c5f60ff6725705b9f7581cb69d2140b9f36804ce2987347ffff3e5fc3244fa9e5b5ab062989419dd0dfd6943f1af8b009cf16745d62b2cfa171f58499ab

  • SSDEEP

    196608:AdHOE10T4CiiCRuTnNIa216yWM4yaAJWriqQxwGuKcya190r0uPTqkbOa//:AdHgGiCRu6a3yWMP02qQxFAywTuPTqkl

Score
10/10

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTMwOTY1NDI0NzE0Njc4MjczMw.GdCiWO.QDjWo8z0Xk0JdOHCguuepaT0RNYGA63CrYGXZo

  • server_id

    1280835675205406823

Signatures

  • Discordrat family
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Moon.zip
    .zip

    Password: a

  • Moon/BootstraperRunmethenopenMoon.exe
    .exe windows:4 windows x64 arch:x64

    Password: a


    Headers

    Sections

  • Moon/ForlornApi.dll
    .dll windows:4 windows x64 arch:x64

    Password: a


    Headers

    Sections

  • Moon/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    Password: a

    22f1907af71b391673dc37c47e7cfa75


    Headers

    Imports

    Exports

    Sections

  • Moon/MoonBETA.deps.json
  • Moon/MoonBETA.dll
    .exe windows:4 windows x86 arch:x86

    Password: a

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Moon/MoonBETA.pdb
  • Moon/MoonBETA.runtimeconfig.json
  • Moon/MoonBETARUNBOOT.exe
    .exe windows:6 windows x64 arch:x64

    Password: a

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Moon/workspace/3527629287.txt
  • Moon/workspace/654
  • Moon/workspace/IY_FE.iy
  • Moon/workspace/OrionTest/6035872082.txt
  • Moon/workspace/place 2534724415 Emergency Response Liberty County.rbxlx
  • Moon/workspace/vape/CustomModules/6872274481.lua
    .js
  • Moon/workspace/vape/CustomModules/cachechecked.txt
  • Moon/workspace/vape/GuiLibrary.lua
    .js
  • Moon/workspace/vape/Libraries/entityHandler.lua
    .js
  • Moon/workspace/vape/Libraries/sha.lua
    .js
  • Moon/workspace/vape/MainScript.lua
    .js
  • Moon/workspace/vape/Profiles/whitelist.json
  • Moon/workspace/vape/Universal.lua
    .js
  • Moon/workspace/vape/assets/AddItem.png
    .png

    Password: a

  • Moon/workspace/vape/assets/AddRemoveIcon1.png
    .png

    Password: a

  • Moon/workspace/vape/assets/BackIcon.png
    .png

    Password: a

  • Moon/workspace/vape/assets/BindBackground.png
    .png
  • Moon/workspace/vape/assets/BlatantIcon.png
    .png
  • Moon/workspace/vape/assets/CircleListBlacklist.png
    .png
  • Moon/workspace/vape/assets/ColorSlider1.png
    .png
  • Moon/workspace/vape/assets/CombatIcon.png
    .png
  • Moon/workspace/vape/assets/DiscordIcon.png
    .png
  • Moon/workspace/vape/assets/DownArrow.png
    .png
  • Moon/workspace/vape/assets/ExitIcon1.png
    .png
  • Moon/workspace/vape/assets/FriendsIcon.png
    .png
  • Moon/workspace/vape/assets/HoverArrow.png
    .png
  • Moon/workspace/vape/assets/HoverArrow3.png
    .png
  • Moon/workspace/vape/assets/InfoNotification.png
    .png
  • Moon/workspace/vape/assets/KeybindIcon.png
    .png
  • Moon/workspace/vape/assets/LegitModeIcon.png
    .png
  • Moon/workspace/vape/assets/MoreButton1.png
    .png
  • Moon/workspace/vape/assets/MoreButton2.png
    .png
  • Moon/workspace/vape/assets/MoreButton3.png
    .png
  • Moon/workspace/vape/assets/NotificationBackground.png
    .png
  • Moon/workspace/vape/assets/NotificationBar.png
    .png
  • Moon/workspace/vape/assets/OnlineProfilesButton.png
    .png
  • Moon/workspace/vape/assets/PencilIcon.png
    .png
  • Moon/workspace/vape/assets/PinButton.png
    .png
  • Moon/workspace/vape/assets/ProfilesIcon.png
    .png
  • Moon/workspace/vape/assets/RadarIcon1.png
    .png
  • Moon/workspace/vape/assets/RadarIcon2.png
    .png
  • Moon/workspace/vape/assets/RainbowIcon1.png
    .png
  • Moon/workspace/vape/assets/RenderIcon.png
    .png
  • Moon/workspace/vape/assets/RightArrow.png
    .png
  • Moon/workspace/vape/assets/SearchBarIcon.png
    .png
  • Moon/workspace/vape/assets/SettingsWheel1.png
    .png
  • Moon/workspace/vape/assets/SettingsWheel2.png
    .png
  • Moon/workspace/vape/assets/SliderArrow1.png
    .png
  • Moon/workspace/vape/assets/SliderArrowSeperator.png
    .png
  • Moon/workspace/vape/assets/SliderButton1.png
    .png
  • Moon/workspace/vape/assets/TargetInfoIcon1.png
    .png
  • Moon/workspace/vape/assets/TargetInfoIcon2.png
    .png
  • Moon/workspace/vape/assets/TextBoxBKG.png
    .png
  • Moon/workspace/vape/assets/TextBoxBKG2.png
    .png
  • Moon/workspace/vape/assets/TextGUIIcon1.png
    .png
  • Moon/workspace/vape/assets/TextGUIIcon2.png
    .png
  • Moon/workspace/vape/assets/TextGUIIcon3.png
    .png
  • Moon/workspace/vape/assets/TextGUIIcon4.png
    .png
  • Moon/workspace/vape/assets/ToggleArrow.png
    .png
  • Moon/workspace/vape/assets/UpArrow.png
    .png
  • Moon/workspace/vape/assets/UtilityIcon.png
    .png
  • Moon/workspace/vape/assets/VapeCape.png
    .png
  • Moon/workspace/vape/assets/VapeLogo1.png
    .png
  • Moon/workspace/vape/assets/VapeLogo2.png
    .png
  • Moon/workspace/vape/assets/VapeLogo3.png
    .png
  • Moon/workspace/vape/assets/VapeLogo4.png
    .png
  • Moon/workspace/vape/assets/WindowBlur.png
    .png
  • Moon/workspace/vape/assets/WorldIcon.png
    .png
  • Moon/workspace/vape/assetsversion.txt
  • Moon/workspace/vape/commithash.txt