cdc90f38b71f0b982d87b2a911f2c1a2ca9939ec880ecfce7f5e6101669e483f | Triage

Submit
Reports

Overview

overview

Static

static

MoonXCrypter.exe

windows7-x64

MoonXCrypter.exe

windows10-2004-x64

plugins/Cm...ss.dll

windows7-x64

1

plugins/Cm...ss.dll

windows10-2004-x64

1

plugins/Crypter.dll

windows7-x64

1

plugins/Crypter.dll

windows10-2004-x64

1

plugins/HRDP.dll

windows7-x64

1

plugins/HRDP.dll

windows10-2004-x64

1

plugins/Options.dll

windows7-x64

1

plugins/Options.dll

windows10-2004-x64

1

plugins/Pe...ce.dll

windows7-x64

1

plugins/Pe...ce.dll

windows10-2004-x64

1

plugins/Pr...er.dll

windows7-x64

1

plugins/Pr...er.dll

windows10-2004-x64

1

plugins/Programs.dll

windows7-x64

1

plugins/Programs.dll

windows10-2004-x64

1

plugins/Ra...re.dll

windows7-x64

1

plugins/Ra...re.dll

windows10-2004-x64

1

plugins/Recovery.dll

windows7-x64

1

plugins/Recovery.dll

windows10-2004-x64

1

plugins/RunPE.dll

windows7-x64

1

plugins/RunPE.dll

windows10-2004-x64

1

plugins/Se...er.dll

windows7-x64

1

plugins/Se...er.dll

windows10-2004-x64

1

plugins/St...er.dll

windows7-x64

1

plugins/St...er.dll

windows10-2004-x64

1

plugins/TC...ns.dll

windows7-x64

1

plugins/TC...ns.dll

windows10-2004-x64

1

Analysis

max time kernel
95s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
28-01-2025 12:42

Sharing

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

MoonXCrypter.exe

Resource

win7-20241023-en

xworm execution persistence rat trojan

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

MoonXCrypter.exe

Resource

win10v2004-20241007-en

xworm execution persistence rat trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral3

Sample

plugins/Cmstp-Bypass.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

plugins/Cmstp-Bypass.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

plugins/Crypter.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

plugins/Crypter.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

plugins/HRDP.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

plugins/HRDP.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

plugins/Options.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

plugins/Options.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

plugins/Performance.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

plugins/Performance.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

plugins/ProcessManager.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

plugins/ProcessManager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

plugins/Programs.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

plugins/Programs.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

plugins/Ransomware.dll

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

plugins/Ransomware.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

plugins/Recovery.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

plugins/Recovery.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

plugins/RunPE.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

plugins/RunPE.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

plugins/ServiceManager.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

plugins/ServiceManager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

plugins/StartupManager.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

plugins/StartupManager.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

plugins/TCPConnections.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

plugins/TCPConnections.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

plugins/TCPConnections.dll
Size

16KB
MD5

9cae90969d14ab4d686c56bae19e041e
SHA1

0359e8eeed993bbbc6f141b115bd533eeb52533d
SHA256

27e17a43478448f64107df786a170753dbd116eafca7c027f6d357f11e6a4def
SHA512

04a9dc16299d866af7f56ff2ef355310d9437c909ec0dd3549d2f142e71149b09822106e254970f00801fe2f0df6b6d2670cf6a8256d85cd35b963c028f6202d
SSDEEP

192:VsFaPxrfOKHEWS3/tQ6v/Lvyrq6gNZOtyEox0GTeA19Z/J6IW1Gz/yyY8RKIxLuM:/9GKkWuv/LyvSwyzTeej/Zz/IHUv

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\plugins\TCPConnections.dll,#1
1⤵
PID:4476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy