7661c282625f96cef45e44a57f6f554b129af1f31e2d94fe10df8d4588f3aa00 | Triage™

Login
Reports

Overview

overview

6

Static

static

1

Apps/Syste...all.sh

ubuntu-18.04-amd64

3

Apps/Syste...all.sh

debian-9-armhf

3

Apps/Syste...all.sh

debian-9-mips

Apps/Syste...all.sh

debian-9-mipsel

Apps/Syste...tus.sh

ubuntu-18.04-amd64

3

Apps/Syste...tus.sh

debian-9-armhf

3

Apps/Syste...tus.sh

debian-9-mips

Apps/Syste...tus.sh

debian-9-mipsel

Apps/Syste...all.sh

ubuntu-18.04-amd64

3

Apps/Syste...all.sh

debian-9-armhf

3

Apps/Syste...all.sh

debian-9-mips

Apps/Syste...all.sh

debian-9-mipsel

Apps/Syste...on.svg

windows10-2004-x64

3

Apps/Syste...on.svg

windows11-ltsc_2024-x64

4

Apps/Syste...all.sh

ubuntu-18.04-amd64

3

Apps/Syste...all.sh

debian-9-armhf

3

Apps/Syste...all.sh

debian-9-mips

Apps/Syste...all.sh

debian-9-mipsel

Apps/Syste...ter.so

ubuntu-18.04-amd64

Apps/Syste...ter.so

debian-9-armhf

Apps/Syste...ter.so

debian-9-mips

Apps/Syste...ter.so

debian-9-mipsel

Apps/Syste...per.sh

ubuntu-18.04-amd64

1

Apps/Syste...per.sh

debian-9-armhf

1

Apps/Syste...per.sh

debian-9-mips

Apps/Syste...per.sh

debian-9-mipsel

Apps/Syste...tus.sh

ubuntu-18.04-amd64

6

Apps/Syste...tus.sh

debian-9-armhf

6

Apps/Syste...tus.sh

debian-9-mips

Apps/Syste...tus.sh

debian-9-mipsel

Apps/Syste...dog.sh

ubuntu-18.04-amd64

6

Apps/Syste...dog.sh

debian-9-armhf

6

Sharing

Copy URL Twitter E-mail

General

Target
trimui-moonlight-obss-fix-0.2.1.zip
Size 45KB
Sample260731-pm2bvstvbv
SHA256 7661c282625f96cef45e44a57f6f554b129af1f31e2d94fe10df8d4588f3aa00
MD5 db15acb39be935ec678e57354c801617
SHA1 64eda7ea4642f3531606965c89501677251e67ec
SHA512 a13b3c56f148ba3047463f3db58d0c5dbfde5eba2a8e3505bb7bf38daff156f8ec678794cd5fc082110479eea60531d633f71473098624e65a3338cc8f182267
SSDEEP 768:cSrqx4jFSrqx4jSSrqx4jOi1BNJpjp7iNQK6dMjmWCq:R0pNiNn+bW5
TLSH
T11223BF900B05A9A9F1C68E746720D0E9C5EF985B28C767AF37F93A11CC3F583532A54E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

adware credential_access discovery linux spyware

Static task

static1

Behavioral task

behavioral1

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/icon.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral14

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/icon.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral15

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

3 signatures

150 seconds

credential_access discovery

Behavioral task

behavioral28

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/supplicant-post-start-watchdog.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

3 signatures

150 seconds

credential_access discovery

Behavioral task

behavioral32

Sample

Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/supplicant-post-start-watchdog.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

2 signatures

150 seconds

Malware Config

Targets

- Target
  Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
- Size 432B
- SHA256 af1d2aa270703401d449c9a1963551a92abdafb4a2f36efec3226a88c4441af4
- MD5 bac2b5f4ad78592efb0ee8b1bb767f7e
- SHA1 3f5902328d112d772d9f0485d3bb292e9dd09cca
- SHA512 e354f49bf810d752c0719ee1713f25229ca18bfa3cf7c1a0d0737647c53260bf9aace01070b2f99fbb7221e7b12a45f1359e4af17cbb67fb38363bb5158027c0
- TLSH
  T1FBE05C296D049F3A54C346323607A45900B6808B7A18B260E6CB14C9EB3CAA0309FB26
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
- Size 637B
- SHA256 42c9a453af009b4bc15ab7024839c5f117aeb0ef5b20275a156aa50366ad7251
- MD5 f3a83d0a08bd01f44bb364430e65fa14
- SHA1 389fa75e6fccf70a72795b7f24ffa0208fc1f7bd
- SHA512 febc1c78ddd4999c1549acb36540da3f038a45f77a6c6a2cc31260eaf47ea9f314385363ac5371ed70f717c8bca89e4dfd894c517cb6c6c2debaf287ae87746d
- TLSH
  T12AF0992E1C04DE3A48934A373586A49544BE805B7906B571B1CD0088FB3CAB070AEBAB
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
- Size 433B
- SHA256 8d900eaa3c4c5958387348069ad8a377b665fd9ab7fba422bbbd819b79577653
- MD5 6a64b9220c57ac5098e0bf522af469c1
- SHA1 4d0ba5faab1876ab8bf0aca34dc6fc450162c6ef
- SHA512 82f64551be3fe27592d371c43a4ef1d173ae5e6b83ee6d984092ba93516eed37189d4a610e23f809ec67a8d4600a0bdfaf2b45f222db4b2a3b2b30eddfe7cb39
- TLSH
  T117E05C2E2C049E2B44C345223606A08900B6814BBB18F264E1CD00C9DA3C6A1309FB25
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/icon.svg
- Size 573B
- SHA256 d87c398d4dbe90c1480cc583cdec66121f716e1912b153e9ab16a31b358d9efc
- MD5 661c37bdfcab21689cb0dcffa3525f21
- SHA1 42926f2bc1eb9b7624b719ce939cc8a395f9699c
- SHA512 da08e5222ed987312f9d5394144bc2017a72e71018b4beb6db6f98c7565b2c9002b3696ff514adb7087b5da73255016b53594c926a324d9ce0e191b7a5955762
- TLSH
  T12AF08BD9D10D848ACA00920A4F1FF067B03AD1D64E660A5568413E8A784E8EFBC037E9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh
- Size 5KB
- SHA256 d2dbe961867816c72e51b186bfd8b78b51a71d75f10574438bad02b8168b3384
- MD5 20461e943ae3ee0e0a7bbb93cb0a755e
- SHA1 11bb21e96fd9da28b59e02101a278d9591af2d5f
- SHA512 514b83f02aa5276985e9b5b653664a6e24d784495bee109938e87aeb107038d297e39f5744a7d3b6522c3c4d8bb20a6948520f363b1613a6a9a48720e99c8fec
- SSDEEP 96:BDGqD4/itourTQnQpqAHw3WliacsK1i/Q/fxXz/+L+JzayBilkkCvciZ:BV4/it1snQpqAHw3Wl5K1i/IfxXz/+Ly
- TLSH
  T113C1971863D0957909C2922EB388A5B75699333B532D7F74B0ED06446FBE4AC39AF3D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so
- Size 12KB
- SHA256 c65535521041904f35b41444428d786280dd7154ffca7eb9302d99ea1fe20acf
- MD5 446d3f29014d28ef2436b5ffbdac099e
- SHA1 13acdf2197a898c8f7f9ee836aea6fb51672a43f
- SHA512 66b49705b467a108fd66c78a92770646812ea7e17059695acbc001239c1d49d52dcfc2a146a64874c857112c068992b2d6198d6e751dd45918ac445fe37a180b
- SSDEEP 96:6BWBlEE7kheF5WqYuTwwngUKhyIfLgwbFZ29BCBSo+A5EN:680EAhY4DhyKVx49IS
- TLSH
  T1E4426159FED9DD2FC4949338849B7B30A3718854EB014377360863713E933E89EA718A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh
- Size 1KB
- SHA256 f46e8d7d5c5f46aa6663de5601837030e79becb623b31fdd47766586f4680441
- MD5 f2e53dd39ce9243b3ae91efad1cc3054
- SHA1 814151fff188c640aad01a3c874fe6d09e7d0cb3
- SHA512 8e0c4afbee0114c90f173cdbb5bbf562439053923b1297cc36050977138c2db4c9f962300adf294fe57c1f9ec83b06dfeb8cad06d002ec2929cb0b472db6516a
- TLSH
  T142111FCE79893A728080C57C28EC3A45470FA12FF084FB8071B505F95FB8025A1F633A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh
- Size 1KB
- SHA256 ef71e4947bad1d3c8c68d959ce7a928a4fad01de488c16ad3fa393408eff725e
- MD5 6506a3e703b6619f483d2ca6d6b98b6d
- SHA1 082fb2d4a0780916eff2483a38e7621feab0fe1a
- SHA512 a911dbc0ab9b22f940d16af4aeecd4ab3d6ca13515f732db98ece96e59967a6c0df8200dfa1c7b7218f85c21937dc05f6d91050ee591cef6afe9bc66dcf29e35
- TLSH
  T19441444AB8C199B4215C997DF496B418658C501F8350BE34B41F24517F8E65EB0FD3D9
- MD5 SHA1 SHA512 TLSH
Score

6^/10

credential_access discovery
- Enumerates running processes
  Discovers information about currently running processes on the system
- Reads process memory
  Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
  credential_access
behavioral27 behavioral28 behavioral29 behavioral30
- Target
  Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/supplicant-post-start-watchdog.sh
- Size 1KB
- SHA256 53ecd575059057202ce3f3998f8733bf11eac878adfe48ec10235f39043bd843
- MD5 db7a78e95e45030842f186cbf4e7a210
- SHA1 dcb632507e3b261035d98e2841cc52ed276a1359
- SHA512 44825107840a0875a9b2d7289ed1132a263bd05232a64a54e3d56aa4e5cd56846ac21b6e001533857f71da7798a72a57ff2233b2bc5000b7d9defe5e1bf0b1b9
- TLSH
  T161414388E986927C2E0AD07DEA1E9A62D547853F4B183423705C38583FECE09B1FD792
- MD5 SHA1 SHA512 TLSH
Score

6^/10

credential_access discovery
- Enumerates running processes
  Discovers information about currently running processes on the system
- Reads process memory
  Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
  credential_access
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

OS Credential Dumping

Proc Filesystem

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

adwarediscoveryspyware

behavioral14

adwarediscoveryspyware

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

credential_accessdiscovery

behavioral28

behavioral29

behavioral30

behavioral31

credential_accessdiscovery

behavioral32

© 2018-2026

Terms | Privacy