Resubmissions

28/03/2025, 16:42

250328-t7vr2ayvhv 7

28/03/2025, 16:40

250328-t61lwszrs5 7

General

  • Target

    Lunar Client - Installer(1).exe

  • Size

    2.3MB

  • Sample

    250328-t61lwszrs5

  • MD5

    376931f67f09f909a4888c0f299cb1ba

  • SHA1

    0513fbdfae3fc163ea23068ce99a4d19d40ec9dc

  • SHA256

    a4d49f0687639aab8115e190e2284857e4a0f7541f79dc215fc1c9c2b1ecde2c

  • SHA512

    fcc272ec3ad120cfd5734b8e91d9c7da13ea85919f1896621234e1f6b84e27ab8abd224bf72468a73862ea1736007e9429aa6edb5d53c619b655772a644c1e91

  • SSDEEP

    49152:ymAV14xE87vxpsrFpIvQUZ7DibcYhkOs6RYjcNkhWocbz:yhT6PN+TIv7ud1+jD+

Malware Config

Targets

    • Target

      Lunar Client - Installer(1).exe

    • Size

      2.3MB

    • MD5

      376931f67f09f909a4888c0f299cb1ba

    • SHA1

      0513fbdfae3fc163ea23068ce99a4d19d40ec9dc

    • SHA256

      a4d49f0687639aab8115e190e2284857e4a0f7541f79dc215fc1c9c2b1ecde2c

    • SHA512

      fcc272ec3ad120cfd5734b8e91d9c7da13ea85919f1896621234e1f6b84e27ab8abd224bf72468a73862ea1736007e9429aa6edb5d53c619b655772a644c1e91

    • SSDEEP

      49152:ymAV14xE87vxpsrFpIvQUZ7DibcYhkOs6RYjcNkhWocbz:yhT6PN+TIv7ud1+jD+

    Score
    4/10
    • Target

      $PLUGINSDIR/app/js/utils/analytics.js

    • Size

      4KB

    • MD5

      525281e9959af4c1c0d11b9243c798a1

    • SHA1

      237a84c5b57bd132f48446d718b20640cb28c263

    • SHA256

      c37f0699cf8ba7d9e3e0f73f1b2af65f4bdc2a31f44594ffc8c73e98b6c2fd1d

    • SHA512

      fe5bafda7773e69c65dd63270e0306abcd39cb2d886b675ab8c714ae0833efde963b69623d468551a1ab37f1db1a1d457f1568f7a29d9cf0bb23bb0edcab5fc4

    • SSDEEP

      96:LlYkmHqqVHlnZ4JGvt+QP2EvVVko3sO2LCgObNS1Tgzalh:AHq1GV+kcRObNSGza3

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/utils/commands.js

    • Size

      13KB

    • MD5

      186f2a801c3d12b8b53e4b8f0510bd35

    • SHA1

      567932df79e60d27d62752b1a1d72d6bf386c6b0

    • SHA256

      bd6e86d0e6b33a44a1617458f0adff34a5cb0fc52568e03e5d74b8c72b5f379e

    • SHA512

      eb87666e8fb40f81d9f14f61a6cffdba57edce1ab9b62c1df3ea3ffb0f96747f90465b2bee956c096f3762d25e90f5f130537046d8deba388d183cee1cc473c3

    • SSDEEP

      384:PUr5HB8c31uUvJQ006W8tusv5qEWOdvAUd:PVhsj

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/utils/cookies.js

    • Size

      1KB

    • MD5

      6c60e675f8c8c68c0174b644d3a63a2a

    • SHA1

      3635a3fe07ccc4a6f33a986ddb690522d0611abb

    • SHA256

      9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287

    • SHA512

      1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/utils/modal-events-delegate.js

    • Size

      1KB

    • MD5

      117e4fdbdb0ecf211c8bd909efd337d1

    • SHA1

      9f8684d856b7c95bdffb139217dfd89f41373187

    • SHA256

      267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857

    • SHA512

      f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/utils/strings-loader.js

    • Size

      5KB

    • MD5

      9c94eb933d8a43dd3825e67a7e30c980

    • SHA1

      7ec7b16af6f399219209ba5967d377040486a11b

    • SHA256

      96445709fde2613af50f4b8908296d4bfccdccb2d9db9febc34a9bf4dcc70ecf

    • SHA512

      a662a299e31633f71a9b9675970359430fdac06dcc284fd7ce92919f244c7f921639f97a42356e993a95865e6c9f198dcba82c126f82065bf2009a31ec9b02f5

    • SSDEEP

      96:FXS/WSBWlbBtDhWFTnTeWsNkEj1I/6WfwkUlx416moPdXDKP8j8yZrME6:FXSuQwBBh0nTevNkEj1O6Wme0muXDK0W

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/utils/utils.js

    • Size

      118B

    • MD5

      a0952ebeab701c05c75710c33d725e7e

    • SHA1

      1da8a2e889f1213d481ae3cd5571670c01e64adc

    • SHA256

      b4f0c48cbfeaf8141fd44b12031e3f0410cb0cdc313888ffdb14fdf1d2341246

    • SHA512

      5e5ae616d3fded7d2bf47a326242c4477ca3119fb52897bfb41de0be230ccbd6c3da2c00268b3973e9bf7b4f2886aba64fd9719b448662e4130ee66d87913389

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/cri/cri-controller.js

    • Size

      3KB

    • MD5

      4e4b4a9e2d86ae3c108105078db6d730

    • SHA1

      826946be793c999316af6c1db10523950b18ea2c

    • SHA256

      cee7fc5a36a01a439125be031923d7e7415ec56194255048098169a0108034b7

    • SHA512

      1420065cd000ce9b9c39d27b5dc5f4055f67146e06573a03184649851c9745f0c0af2b5e35b41b5923703dd74e32f9ed95fc59a43db25f854584e319950beffe

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/cri/template.js

    • Size

      1KB

    • MD5

      76c1ef0cb437db144c2bed53a5a8a5d7

    • SHA1

      aaab8fff649f8e46d1e9510018118ee9abe01498

    • SHA256

      505d3c4de7d9cf8f0155b5b1a3c8792bc0ca2eda6781b441bd85455f144be22e

    • SHA512

      822bf9feda91c89539d263c6c9053163e8dfa3c511195bc61a9b608b4687fb4048733323f03dd30a7ab661a4be4acf6c8d8ae7bb6723771122540a9551899c3e

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js

    • Size

      1KB

    • MD5

      eb6d6bd7e05d4477e2704dd87b57ca35

    • SHA1

      f42672ec1e23a3f4bcc2952746d87ba8deff44be

    • SHA256

      5ca97132a258ed1f36e401d70ccb95be2c9e18395e6010c40f61172914477de5

    • SHA512

      1402d611f910cf5078e804175fa4693b591348d3e7cf6d0a6bbe026c259eb9e0bc285233c80cb2f4690674c3e927bc72fbdcbe758826b98fd02ecb3ed82e339a

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js

    • Size

      681B

    • MD5

      d1cb34b57cef7e28b9286454b197b712

    • SHA1

      f3a964b319bab82d4eda07e126bbfd6dec35c349

    • SHA256

      b61dfc304b46e8cd95d7b15bb93c6160b30523a1a093397a84fc8b8bed00ac42

    • SHA512

      3a07de9c58134edbb7998f85e6d037a0cd066e32c4daa07594a949a7574f5693153bbcdb59739e1a92e847ab1128e2369fb30ba76a7b9cdfa9a37a409db691c1

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/finish/finish-controller.js

    • Size

      1KB

    • MD5

      138240ea22084428e9e25583e9156568

    • SHA1

      e8bef7eab5b6e7040b996ec9504436e073444bd9

    • SHA256

      4cb4e1aa25c15ae5f2e63fa4658a8acff0ce63e0f59cb6eb634df2dfe336e2ec

    • SHA512

      e97b81b0ecd964e6e909019353efe4f5582f65763ac4197d754f1c4eea19cfc249900ae597fd33e29f531bb0d1c7e0f010793c59a2b0099fa75ad0b7d01ce8a7

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/finish/template.js

    • Size

      1KB

    • MD5

      f092de7ea66d8e920b345f38537fa35d

    • SHA1

      82d107a409f18878307ae0cefe24074db64937c4

    • SHA256

      b05f111369e12ecb4cdc6526dd554061eb31097aa0de4bd126ddc185b69d922f

    • SHA512

      14942c0122f216c07595cbaae498f9c4d37a2d0fd95f262c332502befdf4566c7a042c4d85702c1d82a111123dde677096195e9efeb1d74eb1dfd4df84d01a23

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/main/main-controller.js

    • Size

      11KB

    • MD5

      15b665a5c915004e1aa7e9e11a710f7e

    • SHA1

      7821924e42bb19d60c572ff80bbaaa04d7aaeefb

    • SHA256

      84dc33e2eb3118fc77a38b0ca53af42c53f6eb85cfb1e8737dbe39fa03515653

    • SHA512

      dd47f7bac0dbaac714e6d2fc91b4c24756ca4acb70bdbc4b54cd5216552d6bb85ba2e1c3c8445c5fb40d116dfab6569945cd74730bb7c8f3cf46e8d08f8afa02

    • SSDEEP

      192:28RRXC9xThFzkzLZ1ksEIA6li5djpACga0U2FxVgMKV59GsZydwOVTzdfj5UEdwV:2sCHTTzkzLZhJit+y3ZydwKf6

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/main/template.js

    • Size

      3KB

    • MD5

      a118c7724c208f12083240cafccfd10b

    • SHA1

      f89c676a215b869626737862a08c9eb07d440211

    • SHA256

      63a43bb08403972d0f4b0e381bd264af14e826e0035242bc1baa9a815956b8fc

    • SHA512

      9fede79044ae5de7baf5bfba0d5a515ce462a25420026ff45bcf1751e57510023cb40df42d08e880114f62b38ddb218355d5357b725df32a41ae4e6a18414cb3

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/modal/modal-controller.js

    • Size

      2KB

    • MD5

      b04bdfd1c7d09bdbdb94a2455fdd677b

    • SHA1

      f000ba4866ff16d75bfd6cf446763498e19b12b1

    • SHA256

      4565ee81ffe222b31982088b1c18850076e3acf59198ebce08118e12cbd87ea1

    • SHA512

      3cb6ef0a16309046e7f407e7321eb12212b0eec09ec1a04b1d813f6c7a04546714865c3b398a93985041f598156ed905ebd23a64260801281b29ada9bc19ec5c

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/privacy/privacy-controller.js

    • Size

      2KB

    • MD5

      10897b8f8e410b128258fd4fcb183bb3

    • SHA1

      e8dbd5a9018a2183a43f30da503d10a91f104763

    • SHA256

      67556e333a57f50c62bb68f7bb08fbc619d7cb5342e05a75d5023d376c56d306

    • SHA512

      307bfdec5d5a1495be300f61f2c3a8477a9b08da607244f6f72de3238fdff6d6d095e9d05f5ccf2780b8e56d2b48835da82ce4519d329fdbd6aad28a2ee82d39

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/privacy/template.js

    • Size

      655B

    • MD5

      cf8d2c26520d7c84e560dfa79e31dcd3

    • SHA1

      716f2ec17480d5cc9c145bc147833fbfc39d36f0

    • SHA256

      95c459eae0edccdb94702aea603a097e461daa0e5f37dcd0e30de7df665433a8

    • SHA512

      d466dcf7e86a4295857020feea281fc89f519f6bf1e79c3b5e1046d0745c9c9010377b1941e06c9a9b2c78a4173ed9909332d5d6c39b05f460e8a863086c895b

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/progress/progress-1-controller.js

    • Size

      1KB

    • MD5

      82f0b997ed552c52a510a9f2ab29dc3a

    • SHA1

      92aec3a656053c71eccdde610130f5d8008fa96f

    • SHA256

      838bab990ce38372dfedb50eb0a270db705811729630ab8557c08bd1e9e8e105

    • SHA512

      ecf67f877002d746eff8af3a50155aa381513ddafd17b6bff0188c85f0765579fea0112e82e1371f962b1f5decc94b65e6120f21fb516533dac35a2d541065bf

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/progress/template.js

    • Size

      242B

    • MD5

      92b145e6649ba0add3dee9a69d3fa91e

    • SHA1

      4db1a45392ec973cc8a7eecf3a30a9a7ecc7a64d

    • SHA256

      a7128a08bca53dd919cab3e5cb4dab31ded7ae2dafc957209b9fdd23f3b944ab

    • SHA512

      747a087dffdba5c92d9f4c8923615d388b9c4c79d3b71d3cb90487aa37c132290a4f5107eef3055c03eadcb9614e20d4655393dc9251fab7e0ee2438f0d95751

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/settings/settings-controller.js

    • Size

      6KB

    • MD5

      378c18dd7d5cee6ca7c4ddd0396b535b

    • SHA1

      d5f81d4fab29201fd1629dc4d8e6f918c0c30479

    • SHA256

      b5c5dc5e0684fd97eb4c45896dc1c2de8a6a6fdc63b6aa83a99103c15787ef35

    • SHA512

      c29416b3f0245f4826d857dc8c52c969071d2410c945bda96f38f59a9bc7137ee534d84865e5ac55a1e3cea6bb705c5d592725af709cd97e7f38ff05dbaafe5b

    • SSDEEP

      96:5RFTr5TvuTlpwWXs/t2V9OqIJ6OFGR+4V6RjTmoSrOlidbtmfPNVC8V/pGHmI4Rj:5RFBjugWX8YV9UAf+4CeoSrGWmNh

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/settings/template.js

    • Size

      4KB

    • MD5

      28513de0830383a516028e4a6e7585a0

    • SHA1

      d31fc3a6f4a3ce6c4afb82ff2342a1ed718809e5

    • SHA256

      8014a7c919da249ba2f2196d9c9b62639d20851be426f3ffaef161cbe477c45f

    • SHA512

      0f7321c2ae13145bb694368dae1b74e6fe20e6b09712da2178bc46e6aa65223ab84c38abbf0ed074c85b42dba1a238a5f3f8d1ae060a0af6df748c5befe11b61

    • SSDEEP

      48:Zx8LQmDdbaoFRpm4+0A2AEeQmDdbaoFCpm4+0A2AW:wpm4+5nHym4+5nW

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/welcome/template.js

    • Size

      1KB

    • MD5

      17f54fca6723b983875d940d931e0afb

    • SHA1

      01774cd5cea36bd74c80a708d6f77567e8091024

    • SHA256

      42c546e9da748ef76fdab56b96fd511eb607617a9ba37b3dc420148b769d8acb

    • SHA512

      401df9a54cd14c19227d91bd08b4775a7b437644b4ca0d1d636d3e07b04591f9c5516e80040ae6a79ba400457d15e3d80aa148a63de870a64664fc5a02f7a038

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/welcome/welcome-controller.js

    • Size

      2KB

    • MD5

      50f676754862a2ab47a582dd4d79ecf3

    • SHA1

      1cb2f4b11f9f8cfc8dc57ff29d0256dec4811158

    • SHA256

      6155691dbdd66290109afb91617f9cf68af6bd912991d5d27b922f5faa7f530b

    • SHA512

      ccfc89e08fd36f0a694fcda17efb84ca285b6c62afe2e3a794fdad19b6882a4b618645f4d9171673ba56fb4c55fce336d6b8d26dec3a5cc11293ae2b211f499f

    Score
    1/10
    • Target

      $PLUGINSDIR/app/progress.html

    • Size

      20KB

    • MD5

      3cf16292a3b2b0a8e8be4d5dec3fe7fe

    • SHA1

      aea7bb7dcd69e29bfd176e4eb13e820ce3a6f008

    • SHA256

      9a074fc3a4e2b98ee4855e9ae491d0c004659bc2db623f90fdacf3f2e4b07761

    • SHA512

      0464aab09429e9c5c09b757a4d588fa1714cc9fe100e41559659a2aea1afeb5a10c292182e1784c40a09557222200a2dc2010007f64678e5de7178616a38086c

    • SSDEEP

      192:ha/cVDYmPkhHmY74deqmtRCtmK8WQI9gHcMlxh8Bi9LJFHab4rmgJnc5t/93j1uv:h+XaMr9n2u53UA5ia6w

    Score
    1/10
    • Target

      $PLUGINSDIR/log4net.dll

    • Size

      270KB

    • MD5

      f15c8a9e2876568b3910189b2d493706

    • SHA1

      32634db97e7c1705286cb1ac5ce20bc4e0ec17af

    • SHA256

      ae9c8073c3357c490f5d1c64101362918357c568f6b9380a60b09a4a4c1ff309

    • SHA512

      805cd0a70aba2f1cf66e557d51ad30d42b32fbafcfbc6685ec204bc69847619479f653f4f33a4e466055707880d982eb1574ddab8edfa3c641e51cda950e2a0e

    • SSDEEP

      3072:F+8gmdoxSO7ZbQFroo7RVir/dtnK0sgdnogtHcU5qFG1RSGCkE9kKn7GCcaLoWnS:I1N8LLI/PK0scnodG1RS1T93caLQD

    Score
    1/10
    • Target

      $PLUGINSDIR/nsProcess.dll

    • Size

      14KB

    • MD5

      10e47e822b85d2a12fa4727001612182

    • SHA1

      12826a0cc7103e13f9be20a00ecc2c0fc995d2d5

    • SHA256

      d530589a90918334b8e08d7355630892dd62f41333d948a860735d5becfcb391

    • SHA512

      1ca0fa5d3727c23bdf5cf3123bc784070a93982e11e3fd1a875712ee3422730c0fba54a121aa814585466ba837f8122bc72b39c08de07d8ad369ced5155955f7

    • SSDEEP

      192:jUl64IGsjBIYiYF8tO7zBNUjgA5K+o/y2sE9jBF0NyAa53Ug:QZwIYiPWBNUkAM+o/8E9VF0NyD9Ug

    Score
    1/10
    • Target

      $PLUGINSDIR/nsis7z.dll

    • Size

      96KB

    • MD5

      21a09f96b9457a16f511471b87f59c51

    • SHA1

      1ca59e391dcd679497f40b4e192101a3e335bdab

    • SHA256

      376c4dde25193b10d16e17b88243940553e35d3c2f7219c19d5948ecb2233850

    • SHA512

      44684024a16dc0ad3edc79b095cdac2890808f5153648944acdfd8e6b41fce27bfd0db2f004a05d30be30627f9cf843d994d730784b087720bcb760d298eb922

    • SSDEEP

      3072:T4W0KMrKri9UX0X8Z365LUqXYwBleqleoutQSyEkQ:O1ZXqK5L3XsoS+xQ

    Score
    1/10
    • Target

      $PLUGINSDIR/nsis7z64.dll

    • Size

      514KB

    • MD5

      284c46af1fd2ec3a60ee0c28f276f2a4

    • SHA1

      4d4d41c0af12d928e4e553ab6b80e6b4ab8007bc

    • SHA256

      2368be6d8b21e0047146d3f61f90966a71d0737eed0146bc692b59f3cac97793

    • SHA512

      ca9e4ef79c9c7c5f2282ddeee34ec39a51cddf26dcad4e9f2e42230499b0b898ac2dfd33f25438aa995741d23037fa01a0269823c283b234ecec0f155d3c05ec

    • SSDEEP

      6144:C5IQHIy4gGVccVSVwp78nPfRvFbVWHWWDwkUzF2C/GJAiLwQ9r1uykJE6KizMSZJ:eIQHIXVL8g7EW2z4oGJ4gr8FzvJ

    Score
    1/10
    • Target

      $PLUGINSDIR/uac.dll

    • Size

      24KB

    • MD5

      861f7e800bb28f68927e65719869409c

    • SHA1

      a12bfcd2b9950e758ead281a9afbf1895bf10539

    • SHA256

      10a0e8cf46038ab3b2c3cf5dce407b9a043a631cbde9a5c8bcf0a54b2566c010

    • SHA512

      f2bf24a0da69bbe4b4a0f0b1bfc5af175a66b8bcc4f5cc379ed0b89166fa9ffe1e16206b41fca7260ac7f8b86f8695b76f016bb371d7642aa71e61e29a3976eb

    • SSDEEP

      384:5GVY6ClGoWxXH75T1WVl83lLsFIYiPWc+6AM+o/8E9VF0NyOk:tBWxXH9TYqlAyYiPjAMxkEH

    Score
    1/10
    • Target

      $PLUGINSDIR/utils.dll

    • Size

      58KB

    • MD5

      c6b46a5fcdccbf3aeff930b1e5b383d4

    • SHA1

      6d5a8e08de862b283610bad2f6ce44936f439821

    • SHA256

      251ab3e2690562dcfcd510642607f206e6dcf626d06d94b74e1fa8297b1050a0

    • SHA512

      97616475ef425421959489b650810b185488fcb02a1e90406b3014e948e66e5101df583815fd2be26d9c4d293a46b02ba4025426f743e682ed15d228f027f55c

    • SSDEEP

      768:cmLFb5dc9LS+8dayUhaPxYkkLE53UEDNnxqWLb1pA26MbwYiPbAMxkEu:cmLFtd9+O0fkV7xpD6ww7Pbxy

    Score
    1/10
    • Target

      $PLUGINSDIR/websocket-sharp.dll

    • Size

      259KB

    • MD5

      1b4fcde3554ed9ca14e8e7c3a1706fb3

    • SHA1

      78070a29fc2943f49e896fb16e681431596bc613

    • SHA256

      b152284fd1ef5cebee56802f13b46def7c136f0c50fb173ae29cf0648bb4cb1f

    • SHA512

      091940363d0f4873bf169721082ac63e1f6208fa79c42da6255aac8b43aa7e01879e8ae9f1475df68e77a50fb157d298a5a480ea94d6c0a57b03b47d69a1bfe3

    • SSDEEP

      6144:2QNVC/FesewE4JVcmOBj6ssqq70ZOAs3PPJPsgUrf:0/MsaiVxOBnq7PM

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks