Overview

overview

10

Static

static

10

Moon.zip

windows7-x64

10

Moon.zip

windows10-2004-x64

1

Moon/Boots...on.exe

windows7-x64

10

Moon/Boots...on.exe

windows10-2004-x64

10

Moon/ForlornApi.dll

windows7-x64

1

Moon/ForlornApi.dll

windows10-2004-x64

1

Moon/Forlo...ct.dll

windows7-x64

1

Moon/Forlo...ct.dll

windows10-2004-x64

7

Moon/MoonBETA.exe

windows7-x64

1

Moon/MoonBETA.exe

windows10-2004-x64

1

Moon/MoonB...OT.exe

windows7-x64

3

Moon/MoonB...OT.exe

windows10-2004-x64

1

Moon/works...481.js

windows7-x64

3

Moon/works...481.js

windows10-2004-x64

3

Moon/works...ary.js

windows7-x64

3

Moon/works...ary.js

windows10-2004-x64

3

Moon/works...ler.js

windows7-x64

3

Moon/works...ler.js

windows10-2004-x64

3

Moon/works...sha.js

windows7-x64

3

Moon/works...sha.js

windows10-2004-x64

3

Moon/works...ipt.js

windows7-x64

3

Moon/works...ipt.js

windows10-2004-x64

3

Moon/works...sal.js

windows7-x64

3

Moon/works...sal.js

windows10-2004-x64

3

Resubmissions

18-12-2024 18:26

241218-w3lpnsykeq 10

18-12-2024 17:16

241218-vtjchswle1 10

Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    18-12-2024 18:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Moon/ForlornInject.dll

  • Size

    6.3MB

  • MD5

    a40dcf9942879728c738a5161e9ea455

  • SHA1

    3d35c866c70db1c34daba07197bc4a834bc794f3

  • SHA256

    8e11bbf4a2f5ea522804219789db209f906ec7e23d5b273547e4eceee82b6c44

  • SHA512

    ab41eddeee2c7edb9dda5d91843546f2d0e41e11ac125cd9750b9531a63c7f4abd2faee412d8fd309390d1040e5b787ea98dfd754b14830aecedc739e0a9fbde

  • SSDEEP

    196608:VqHqqhOnCaiiyFUHH76pyS1Ii8eGAvKQ0pOwqz:VqH8iiyFUSydi8eePpOw+

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Moon\ForlornInject.dll,#1
    1⤵
      PID:1732

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads