General
- Target LunaTranslator_x64_win10_v10.15.9.15.zip
- Size 64.0MB
- Sample260622-klg5daav6j
- SHA256 e9ff78ea7de73da3f1b26a0311d20ca5ab68180dd2d8d47fea07a005fb12c009
- MD5 4771e6e2a0f86cbd1231c7eb7c226fac
- SHA1 c9f3bd817096d4edfa8790bde3f984024b1bef2b
- SHA512 22d56bbc696441f8be3a898685f8b8930d8157493a8da451ecd8ae51ad0018dfaf2f4651d073d2a4ba981a487e95626f778e85ab277a73361351ed272b550f86
- SSDEEP 1572864:9S3ml5AhTOD4GeU9O0nGgpxXFgQpwUDJtDnSDIMKpRKY8JHy+b/h:gW0hTO0rU93GTQpwCnSDIMKpRYHXb5
- TLSH T14BE73314C0AA1849C063B33E97DB2ECEF32166D665A19E437A135536FC876E4C706FB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
LunaTranslator_x64_win10/files/Magpie/Magpie.Core.exe
Resource
win11-20260513-en
15 signatures
300 seconds
Malware Config
Targets
-
- Target LunaTranslator_x64_win10/files/Magpie/Magpie.Core.exe
- Size 1.5MB
- SHA256 fe2e9588eed262d560f6f43ba2ef8dc60413e5327fdc4778942826b9286e911b
- MD5 49a7d63a285a94e3f2472ce2f7fe8618
- SHA1 43afb493e53d68c0ce07f2c80373a7a681431f84
- SHA512 ef6fb607fdf8efe4c0827f90297106791039044242dfdf8071e837216da3ae9b077b83ca5b88b9974b454a8015ca2feb3a4992b772dad1e7f5ea265d634650db
- SSDEEP 24576:k2CwsksdDBj+IoKNOk/ZmjpQSilfTeObEoeiHT4fFETjXVyeIf6Ii/0HKQwP9W:xqBj+Ioo/ZmFLiVTejgTdLa6V/0HE9
- TLSH T1C3759D27B1A801E8D07AC279C6569F07EB7134091B716ADF13F04AA52FA36E05F7E352
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1