Overview
overview
6Static
static
1Apps/Syste...all.sh
ubuntu-18.04-amd64
3Apps/Syste...all.sh
debian-9-armhf
3Apps/Syste...all.sh
debian-9-mips
Apps/Syste...all.sh
debian-9-mipsel
Apps/Syste...tus.sh
ubuntu-18.04-amd64
3Apps/Syste...tus.sh
debian-9-armhf
3Apps/Syste...tus.sh
debian-9-mips
Apps/Syste...tus.sh
debian-9-mipsel
Apps/Syste...all.sh
ubuntu-18.04-amd64
3Apps/Syste...all.sh
debian-9-armhf
3Apps/Syste...all.sh
debian-9-mips
Apps/Syste...all.sh
debian-9-mipsel
Apps/Syste...on.svg
windows10-2004-x64
3Apps/Syste...on.svg
windows11-ltsc_2024-x64
4Apps/Syste...all.sh
ubuntu-18.04-amd64
3Apps/Syste...all.sh
debian-9-armhf
3Apps/Syste...all.sh
debian-9-mips
Apps/Syste...all.sh
debian-9-mipsel
Apps/Syste...ter.so
ubuntu-18.04-amd64
Apps/Syste...ter.so
debian-9-armhf
Apps/Syste...ter.so
debian-9-mips
Apps/Syste...ter.so
debian-9-mipsel
Apps/Syste...per.sh
ubuntu-18.04-amd64
1Apps/Syste...per.sh
debian-9-armhf
1Apps/Syste...per.sh
debian-9-mips
Apps/Syste...per.sh
debian-9-mipsel
Apps/Syste...tus.sh
ubuntu-18.04-amd64
6Apps/Syste...tus.sh
debian-9-armhf
6Apps/Syste...tus.sh
debian-9-mips
Apps/Syste...tus.sh
debian-9-mipsel
Apps/Syste...dog.sh
ubuntu-18.04-amd64
6Apps/Syste...dog.sh
debian-9-armhf
6Analysis
- max time kernel
0s - max time network
129s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
31/07/2026, 12:27
Static task
static1
Behavioral task
behavioral1
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral2
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral3
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral4
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Install.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral5
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral6
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral7
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral8
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Status.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral9
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral10
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral11
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral12
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral13
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/icon.svg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/icon.svg
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral16
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral17
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral18
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/install.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral19
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral20
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral21
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral22
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/libmoonlight_obss_filter.so
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral23
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral24
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral25
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral26
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/moonlight-launcher-wrapper.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral27
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral28
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral29
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral30
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/status.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral31
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/supplicant-post-start-watchdog.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral32
Sample
Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/supplicant-post-start-watchdog.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
General
- Target Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh
- Size 433B
- Sample260731-pm2bvstvbv
- SHA256 8d900eaa3c4c5958387348069ad8a377b665fd9ab7fba422bbbd819b79577653
- MD5 6a64b9220c57ac5098e0bf522af469c1
- SHA1 4d0ba5faab1876ab8bf0aca34dc6fc450162c6ef
- SHA512 82f64551be3fe27592d371c43a4ef1d173ae5e6b83ee6d984092ba93516eed37189d4a610e23f809ec67a8d4600a0bdfaf2b45f222db4b2a3b2b30eddfe7cb39
- TLSH T117E05C2E2C049E2B44C345223606A08900B6814BBB18F264E1CD00C9DA3C6A1309FB25
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/uninstall.log Uninstall.sh
Processes
-
/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh"/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh"1⤵
- Writes file to tmp directory
PID:1492 -
/usr/bin/dirnamedirname "/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/Uninstall.sh"2⤵PID:1494
-
-
/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/uninstall.sh"/tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/payload/uninstall.sh"2⤵PID:1495
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /tmp/Apps/SystemTools/Menu/TOOLS##MOONLIGHT WI-FI FIX/uninstall.log
- Size 233B
- SHA256 8637eb5672d1c3f92d074b8154ecf01f6a2833fa65699c9c3a9b0cae95cba4e5
- MD5 b1cf18db1aa3155e17722d5b6977523a
- SHA1 2d711faf0362617fd6c214b9423b8a5475ac9c93
- SHA512 a7386b0dc8ef4765edb069468a422c4fc7c3ef99c50d71536e3ae156d8f99efa310a12a834642f231e6eb03895e008b2b10708d503e99e84aeac673f78d0a49e
- TLSH T142D0A9361B0A88E0BCC216018320C0CCC2EB28232782A3FB63DFCC30C0BA481112CA92
- MD5 SHA1 SHA512 TLSH