Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10MoonXCrypter.exe
windows7-x64
10MoonXCrypter.exe
windows10-2004-x64
10plugins/Cm...ss.dll
windows7-x64
1plugins/Cm...ss.dll
windows10-2004-x64
1plugins/Crypter.dll
windows7-x64
1plugins/Crypter.dll
windows10-2004-x64
1plugins/HRDP.dll
windows7-x64
1plugins/HRDP.dll
windows10-2004-x64
1plugins/Options.dll
windows7-x64
1plugins/Options.dll
windows10-2004-x64
1plugins/Pe...ce.dll
windows7-x64
1plugins/Pe...ce.dll
windows10-2004-x64
1plugins/Pr...er.dll
windows7-x64
1plugins/Pr...er.dll
windows10-2004-x64
1plugins/Programs.dll
windows7-x64
1plugins/Programs.dll
windows10-2004-x64
1plugins/Ra...re.dll
windows7-x64
1plugins/Ra...re.dll
windows10-2004-x64
1plugins/Recovery.dll
windows7-x64
1plugins/Recovery.dll
windows10-2004-x64
1plugins/RunPE.dll
windows7-x64
1plugins/RunPE.dll
windows10-2004-x64
1plugins/Se...er.dll
windows7-x64
1plugins/Se...er.dll
windows10-2004-x64
1plugins/St...er.dll
windows7-x64
1plugins/St...er.dll
windows10-2004-x64
1plugins/TC...ns.dll
windows7-x64
1plugins/TC...ns.dll
windows10-2004-x64
1Analysis
-
max time kernel
92s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
28/01/2025, 12:50 UTC
Behavioral task
behavioral1
Sample
MoonXCrypter.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
MoonXCrypter.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
plugins/Cmstp-Bypass.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
plugins/Cmstp-Bypass.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
plugins/Crypter.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
plugins/Crypter.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
plugins/HRDP.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
plugins/HRDP.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
plugins/Options.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
plugins/Options.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
plugins/Performance.dll
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
plugins/Performance.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
plugins/ProcessManager.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
plugins/ProcessManager.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
plugins/Programs.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
plugins/Programs.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
plugins/Ransomware.dll
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
plugins/Ransomware.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
plugins/Recovery.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
plugins/Recovery.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
plugins/RunPE.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
plugins/RunPE.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
plugins/ServiceManager.dll
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
plugins/ServiceManager.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
plugins/StartupManager.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
plugins/StartupManager.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
plugins/TCPConnections.dll
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
plugins/TCPConnections.dll
Resource
win10v2004-20241007-en
General
-
Target
plugins/Performance.dll
-
Size
16KB
-
MD5
1841c479da7efd24521579053efcf440
-
SHA1
0aacfd06c7223b988584a381cb10d6c3f462fc6a
-
SHA256
043b6a0284468934582819996dbaa70b863ab4caa4f968c81c39a33b2ac81735
-
SHA512
3005e45728162cc04914e40a3b87a1c6fc7ffde5988d9ff382d388e9de4862899b3390567c6b7d54f0ec02283bf64bcd5529319ca32295c109a7420848fa3487
-
SSDEEP
384:LtpW2/E3mawGD1XTgOw2QxHN7yVppy6+:JY2ImYRDKHxV
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Request228.249.119.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request218.135.221.88.in-addr.arpaIN PTRResponse218.135.221.88.in-addr.arpaIN PTRa88-221-135-218deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request14.160.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request167.173.78.104.in-addr.arpaIN PTRResponse167.173.78.104.in-addr.arpaIN PTRa104-78-173-167deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request217.106.137.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request50.23.12.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request206.23.85.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request177.190.18.2.in-addr.arpaIN PTRResponse177.190.18.2.in-addr.arpaIN PTRa2-18-190-177deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request172.214.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request13.227.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request202.135.221.88.in-addr.arpaIN PTRResponse202.135.221.88.in-addr.arpaIN PTRa88-221-135-202deploystaticakamaitechnologiescom
-
66 B 90 B 1 1
DNS Request
8.8.8.8.in-addr.arpa
-
73 B 159 B 1 1
DNS Request
228.249.119.40.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
218.135.221.88.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
14.160.190.20.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
167.173.78.104.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
217.106.137.52.in-addr.arpa
-
70 B 156 B 1 1
DNS Request
50.23.12.20.in-addr.arpa
-
71 B 145 B 1 1
DNS Request
206.23.85.13.in-addr.arpa
-
71 B 135 B 1 1
DNS Request
177.190.18.2.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.214.232.199.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
13.227.111.52.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
202.135.221.88.in-addr.arpa