Overview
overview
10Static
static
3MoonCrypte...ip.dll
windows7-x64
1MoonCrypte...ip.dll
windows10-2004-x64
1MoonCrypte...er.exe
windows7-x64
8MoonCrypte...er.exe
windows10-2004-x64
8MoonCrypte...32.dll
windows10-2004-x64
1MoonCrypte...ce.exe
windows7-x64
3MoonCrypte...ce.exe
windows10-2004-x64
1MoonCrypte...r1.exe
windows7-x64
10MoonCrypte...r1.exe
windows10-2004-x64
10MoonCrypte...32.dll
windows10-2004-x64
1MoonCrypte...r1.exe
windows7-x64
8MoonCrypte...r1.exe
windows10-2004-x64
8Analysis
-
max time kernel
92s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
24-01-2025 23:08
Static task
static1
Behavioral task
behavioral1
Sample
MoonCrypter/Jint/Ionic.Zip.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
MoonCrypter/Jint/Ionic.Zip.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
MoonCrypter/Jint/Launcher.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
MoonCrypter/Jint/Launcher.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
MoonCrypter/Jint/comctl32.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
MoonCrypter/Jint/mce.exe
Resource
win7-20240903-en
Behavioral task
behavioral7
Sample
MoonCrypter/Jint/mce.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
MoonCrypter/MoonCrypter1.exe
Resource
win7-20240708-en
Behavioral task
behavioral9
Sample
MoonCrypter/MoonCrypter1.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
MoonCrypter/comctl32.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
MoonCrypter/fixer1.exe
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
MoonCrypter/fixer1.exe
Resource
win10v2004-20241007-en
General
-
Target
MoonCrypter/Jint/mce.exe
-
Size
253KB
-
MD5
0ec3da715b4dd0c38c00d5102dbcc6c6
-
SHA1
8f94bdd39e48e894d01cc418059288ab0b9fd7ce
-
SHA256
cd24da6a58712ffa1c42790226d2dbcbd4a223e14d001c97e4031170d3ef6a99
-
SHA512
a3b9aff7c374accb0d079104bbf73889c8b0c9c14cbabbf97265048c944efb89cc5b9340fab8e80607e8863d32cec6908d01d079414c4bc69a09301485464232
-
SSDEEP
3072:/kTP5ZkDO0Yb95ks/sptHfLOcHiCeiRHfdhTW4ks/sptHfLO:YRZkoQBtDDQBtD
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 4864 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 4864 AUDIODG.EXE