Overview
overview
6Static
static
1Apps/Syste...all.sh
ubuntu-18.04-amd64
3Apps/Syste...all.sh
debian-9-armhf
3Apps/Syste...all.sh
debian-9-mips
Apps/Syste...all.sh
debian-9-mipsel
Apps/Syste...tus.sh
ubuntu-18.04-amd64
3Apps/Syste...tus.sh
debian-9-armhf
3Apps/Syste...tus.sh
debian-9-mips
Apps/Syste...tus.sh
debian-9-mipsel
Apps/Syste...all.sh
ubuntu-18.04-amd64
3Apps/Syste...all.sh
debian-9-armhf
3Apps/Syste...all.sh
debian-9-mips
Apps/Syste...all.sh
debian-9-mipsel
Apps/Syste...on.svg
windows10-2004-x64
3Apps/Syste...on.svg
windows11-ltsc_2024-x64
4Apps/Syste...all.sh
ubuntu-18.04-amd64
3Apps/Syste...all.sh
debian-9-armhf
3Apps/Syste...all.sh
debian-9-mips
Apps/Syste...all.sh
debian-9-mipsel
Apps/Syste...ter.so
ubuntu-18.04-amd64
Apps/Syste...ter.so
debian-9-armhf
Apps/Syste...ter.so
debian-9-mips
Apps/Syste...ter.so
debian-9-mipsel
Apps/Syste...per.sh
ubuntu-18.04-amd64
1Apps/Syste...per.sh
debian-9-armhf
1Apps/Syste...per.sh
debian-9-mips
Apps/Syste...per.sh
debian-9-mipsel
Apps/Syste...tus.sh
ubuntu-18.04-amd64
6Apps/Syste...tus.sh
debian-9-armhf
6Apps/Syste...tus.sh
debian-9-mips
Apps/Syste...tus.sh
debian-9-mipsel
Apps/Syste...dog.sh
ubuntu-18.04-amd64
6Apps/Syste...dog.sh
debian-9-armhf
6Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
31/07/2026, 12:27
Static task
static1
Behavioral task
behavioral1
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral2
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral3
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral4
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral5
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral6
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral7
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral8
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral9
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral10
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral11
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral12
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral13
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/icon.svg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/icon.svg
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral16
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral17
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral18
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral19
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral20
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral21
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral22
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral23
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral24
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral25
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral26
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral27
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral28
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral29
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral30
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral31
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/supplicant-post-start-watchdog.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral32
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/supplicant-post-start-watchdog.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
General
- Target Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
- Size 432B
- Sample260731-pm2bvstvbv
- SHA256 af1d2aa270703401d449c9a1963551a92abdafb4a2f36efec3226a88c4441af4
- MD5 bac2b5f4ad78592efb0ee8b1bb767f7e
- SHA1 3f5902328d112d772d9f0485d3bb292e9dd09cca
- SHA512 e354f49bf810d752c0719ee1713f25229ca18bfa3cf7c1a0d0737647c53260bf9aace01070b2f99fbb7221e7b12a45f1359e4af17cbb67fb38363bb5158027c0
- TLSH T1FBE05C296D049F3A54C346323607A45900B6808B7A18B260E6CB14C9EB3CAA0309FB26
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/install.log Install.sh
Processes
-
/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh"/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh"1⤵
- Writes file to tmp directory
PID:646 -
/usr/bin/dirnamedirname "/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh"2⤵PID:650
-
-
/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh"/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh"2⤵PID:653
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/install.log
- Size 227B
- SHA256 d2f7650837a0cbc6a689455c3583d0686dde4371eec0c319eef98c28b634e873
- MD5 9cd8ed0d2046a891503839ee41abc41a
- SHA1 0b542bae1995ea1adaa130d1d9fde3d536f45135
- SHA512 072c47f92b0377052854d904907f120fd6bae52ec3e679ef50763fefc8dfdc97dab7e50d88e85f42dca9735a9e5502a3027466cb898a81cd42d5977f444283bb
- TLSH T1E3D0A9364B0A88E0B8D216018320C4CCC0EBA8032682A3FB63DBDC32C2BA481112CA92
- MD5 SHA1 SHA512 TLSH