Overview
overview
6Static
static
1Apps/Syste...all.sh
ubuntu-18.04-amd64
3Apps/Syste...all.sh
debian-9-armhf
3Apps/Syste...all.sh
debian-9-mips
Apps/Syste...all.sh
debian-9-mipsel
Apps/Syste...tus.sh
ubuntu-18.04-amd64
3Apps/Syste...tus.sh
debian-9-armhf
3Apps/Syste...tus.sh
debian-9-mips
Apps/Syste...tus.sh
debian-9-mipsel
Apps/Syste...all.sh
ubuntu-18.04-amd64
3Apps/Syste...all.sh
debian-9-armhf
3Apps/Syste...all.sh
debian-9-mips
Apps/Syste...all.sh
debian-9-mipsel
Apps/Syste...on.svg
windows10-2004-x64
3Apps/Syste...on.svg
windows11-ltsc_2024-x64
4Apps/Syste...all.sh
ubuntu-18.04-amd64
3Apps/Syste...all.sh
debian-9-armhf
3Apps/Syste...all.sh
debian-9-mips
Apps/Syste...all.sh
debian-9-mipsel
Apps/Syste...ter.so
ubuntu-18.04-amd64
Apps/Syste...ter.so
debian-9-armhf
Apps/Syste...ter.so
debian-9-mips
Apps/Syste...ter.so
debian-9-mipsel
Apps/Syste...per.sh
ubuntu-18.04-amd64
1Apps/Syste...per.sh
debian-9-armhf
1Apps/Syste...per.sh
debian-9-mips
Apps/Syste...per.sh
debian-9-mipsel
Apps/Syste...tus.sh
ubuntu-18.04-amd64
6Apps/Syste...tus.sh
debian-9-armhf
6Apps/Syste...tus.sh
debian-9-mips
Apps/Syste...tus.sh
debian-9-mipsel
Apps/Syste...dog.sh
ubuntu-18.04-amd64
6Apps/Syste...dog.sh
debian-9-armhf
6Analysis
- max time kernel
0s - max time network
129s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
31/07/2026, 12:27
Static task
static1
Behavioral task
behavioral1
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral2
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral3
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral4
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral5
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral6
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral7
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral8
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral9
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral10
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral11
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral12
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral13
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/icon.svg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/icon.svg
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral16
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral17
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral18
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral19
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral20
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral21
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral22
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral23
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral24
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral25
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral26
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral27
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral28
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral29
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral30
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral31
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/supplicant-post-start-watchdog.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral32
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/supplicant-post-start-watchdog.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
General
- Target Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
- Size 637B
- Sample260731-pm2bvstvbv
- SHA256 42c9a453af009b4bc15ab7024839c5f117aeb0ef5b20275a156aa50366ad7251
- MD5 f3a83d0a08bd01f44bb364430e65fa14
- SHA1 389fa75e6fccf70a72795b7f24ffa0208fc1f7bd
- SHA512 febc1c78ddd4999c1549acb36540da3f038a45f77a6c6a2cc31260eaf47ea9f314385363ac5371ed70f717c8bca89e4dfd894c517cb6c6c2debaf287ae87746d
- TLSH T12AF0992E1C04DE3A48934A373586A49544BE805B7906B571B1CD0088FB3CAB070AEBAB
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/status.log Status.sh
Processes
-
/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh"/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh"1⤵
- Writes file to tmp directory
PID:1487 -
/usr/bin/dirnamedirname "/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh"2⤵PID:1489
-
-
/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh"/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh"2⤵PID:1490
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/status.log
- Size 224B
- SHA256 1ce437339d08f483b795d92dd4ea0c46faad9669d78db83e83ed5cae5f518636
- MD5 a5dd512d47df615930754aa52d4a4311
- SHA1 1d44d3001b4289703b2314c4de610f9b29874b41
- SHA512 3a19238a0fd636cc9c8a3c6f13e512cd1315f52e12081a378cffd28140a9c97d30e17c9de8ce0edcdfbf53ba3dda694d05a8cd8e5bdf1fa320570776d7418484
- TLSH T1F5D0523A4F0A88C0A8C212018330C08CC8AF2C0326C3A2FB63DA8C70E0B9481812CAD0
- MD5 SHA1 SHA512 TLSH