Overview

overview

8

Static

static

7

Lunar Clie...er.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Lunar Client - Installer.exe
  • Size 3.1MB
  • Sample260724-1s3yesed64
  • SHA256 634b9f24d2d78364170168e50a4580827a738814e13558bdfaeeeca79e8780a7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryexecutionpersistenceprivilege_escalationtrojanupx

Malware Config

Targets

    • Target
      Lunar Client - Installer.exe
    • Size 3.1MB
    • SHA256 634b9f24d2d78364170168e50a4580827a738814e13558bdfaeeeca79e8780a7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoveryexecutionpersistenceprivilege_escalationtrojan

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

      defense_evasion

    • Drops file in System32 directory

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

      persistenceprivilege_escalation
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks