758e956b75a0e4e0fa7cb52d8163a77cc0f18b31222dbd77e84982afc26545ea | Triage™

Login
Reports

Overview

overview

9

Static

static

3

moon sky Loader.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
moon sky Loader.exe
Size 230KB
Sample260711-gp1jcacw7m
SHA256 758e956b75a0e4e0fa7cb52d8163a77cc0f18b31222dbd77e84982afc26545ea
MD5 efb43ca9bf33c66f7dc22489fd41cd2f
SHA1 85ece244f5b7d388ed9b421a8a8ac921b9c6aeb1
SHA512 2da9fe2f6ac91cb24bba6bc9b9234c9b2661a7c9d2e3adc78c40fbb069208e38550a6e8bd94be9d55f15c6741bb093247980ebf3c87d643bb568f228b79b0e7c
SSDEEP 3072:SIU2iC10a8CKID7m/Ex0RixFiTrRUktvwS8ntzTNiNqxisEd4uoJ2mgAg:AX/ExdxAlxTey94fzgAg
TLSH
T1F3345B0A7AA518F5D5BBC43DC942150AFA72BC924760E7CF13904A9B8F23BE0AD3D751
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

moon sky Loader.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

defense_evasion persistence

Malware Config

Targets

- Target
  moon sky Loader.exe
- Size 230KB
- SHA256 758e956b75a0e4e0fa7cb52d8163a77cc0f18b31222dbd77e84982afc26545ea
- MD5 efb43ca9bf33c66f7dc22489fd41cd2f
- SHA1 85ece244f5b7d388ed9b421a8a8ac921b9c6aeb1
- SHA512 2da9fe2f6ac91cb24bba6bc9b9234c9b2661a7c9d2e3adc78c40fbb069208e38550a6e8bd94be9d55f15c6741bb093247980ebf3c87d643bb568f228b79b0e7c
- SSDEEP 3072:SIU2iC10a8CKID7m/Ex0RixFiTrRUktvwS8ntzTNiNqxisEd4uoJ2mgAg:AX/ExdxAlxTey94fzgAg
- TLSH
  T1F3345B0A7AA518F5D5BBC43DC942150AFA72BC924760E7CF13904A9B8F23BE0AD3D751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion persistence
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionpersistence

© 2018-2026

Terms | Privacy