Overview

overview

7

Static

static

3

LunaTelegramAgent.exe

windows10-ltsc_2021-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    1799s
  • max time network
    1095s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    09/08/2026, 04:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    LunaTelegramAgent.exe
  • Size 45.8MB
  • Sample260809-e9jp8azhlb
  • SHA256 52488d7af7993f45c4bbde2bf5866039911405c5baa71a7f85323d3eb50da593
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 52 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\LunaTelegramAgent.exe
    "C:\Users\Admin\AppData\Local\Temp\LunaTelegramAgent.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5080
    • C:\Users\Admin\AppData\Local\Temp\LunaTelegramAgent.exe
      "C:\Users\Admin\AppData\Local\Temp\LunaTelegramAgent.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      PID:1996

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        NotoSans-Bold.ttf
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\NotoSans-Bold.ttf
        • Size 405KB
        • SHA256 68bdd57a1e1e62663a0b372c7224204b82a89820b9cf30391337f61f0c5e7123
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NotoSans-Regular.ttf
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\NotoSans-Regular.ttf
        • Size 405KB
        • SHA256 9e9b4c53bd25cad9c04d370f133a5e32d166d0d54e2a9ad6cba4a31fcd382d5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\PySide6\MSVCP140_1.dll
        • Size 26KB
        • SHA256 b2113956aa3fcb9decfe65be1ee7829f8e3ae0899633ae89fe04888ada201594
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\PySide6\Qt6Core.dll
        • Size 10.0MB
        • SHA256 65fe6224b6c47a15b058738031d31dce9928c4d7a58e1b8db6434f6f5cddd702
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtCore.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\PySide6\QtCore.pyd
        • Size 3.2MB
        • SHA256 be52341a5df1f76ecca2fb1e94eb429dfa46f0b659ed6536f25119b565b21ea8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyside6.abi3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\PySide6\pyside6.abi3.dll
        • Size 242KB
        • SHA256 d4072be872b31f3748de5e6c28cb2976dafbf063d3ccfa38e5dabda29babcdaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\VCRUNTIME140.dll
        • Size 106KB
        • SHA256 76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 e0b66601cc28ecb171c3d4b7ac690c667f47da6b6183bff80604c84c00d265ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _asyncio.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\_asyncio.pyd
        • Size 62KB
        • SHA256 d667822030ba160cd8770569afec2c029b5247ceaa401d9268fe98bbea9e4c11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\_bz2.pyd
        • Size 81KB
        • SHA256 8eecdcc250637652e6babc306ea6b8820e9e835ddd2434816d0e0fd0ca67fd14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\_ctypes.pyd
        • Size 120KB
        • SHA256 af598ae52ddc6869f24d36a483b77988385a5bbbf4618b2e2630d89d10a107ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\_decimal.pyd
        • Size 245KB
        • SHA256 b8409829dc4fde70f38754de55d3090a1cd52c78ffece2a08572a58de3af294d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _elementtree.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\_elementtree.pyd
        • Size 123KB
        • SHA256 b7ec9604084fa090135032633a38b0564f3f5f37fe1446197d008b78975e0418
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\_hashlib.pyd
        • Size 62KB
        • SHA256 441d32922122e59f75a728cc818f8e50613866a6c3dec627098e6cc6c53624e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\_lzma.pyd
        • Size 153KB
        • SHA256 33ae42f744d2688bb7d5519f32ff7b7489b96f4eea47f66d2009dba6a0023903
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _multiprocessing.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\_multiprocessing.pyd
        • Size 32KB
        • SHA256 871937b23a6c7a1e0745697aae7c8e886be3c493c978f88f620c74f411325d73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _overlapped.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\_overlapped.pyd
        • Size 48KB
        • SHA256 6f79a76094f43c55899fe804cdd5d44ba6ff920c651436a7effa30e7c01b96ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\_queue.pyd
        • Size 30KB
        • SHA256 39bd456267fe228a505ef4e9c8d28f948dd65123cb4d48b77da51910013fa582
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\_socket.pyd
        • Size 76KB
        • SHA256 360744663fce8dec252abbda1168f470244fdb6da5740bb7ab3171e19106e63c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\_ssl.pyd
        • Size 155KB
        • SHA256 d9cc4358d9351fed11eec03753a8fa8ed981a6c2246bbd7cb0b0a3472c09fdc4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _uuid.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\_uuid.pyd
        • Size 23KB
        • SHA256 d17e20063243a71b4331c7a8902451c6911fd87475ec918633c6388d6155ce52
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ada92cb5d92a588d1b93__mypyc.cp311-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\ada92cb5d92a588d1b93__mypyc.cp311-win_amd64.pyd
        • Size 216KB
        • SHA256 fc17eb621ecf2325e3c2d7501d3ee2c3848e3c7fec7027fda7c7fa1782874743
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\app.py
        • Size 56KB
        • SHA256 4f96b1e8ca022affeced7211bcaa6e508fe8e3659a4ac0450cca6a30f4b56f71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\base_library.zip
        • Size 1.4MB
        • SHA256 71389957c97e8c3a3ec1f1cc2d97c3386f2fabb65e8be9e22cb0c8a32cfb5287
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        client_api.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\client_api.py
        • Size 4KB
        • SHA256 fa33c9b7f031e4a19785efbe8e83a132410198a5ef3c4b895b01ab8c7a021f8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\libffi-8.dll
        • Size 37KB
        • SHA256 68fba9dd89bfad35f8fd657b9af22a8aebda31bffda35058a7f5ae376136e89b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\libssl-1_1.dll
        • Size 686KB
        • SHA256 2aebb73530d21a2273692a5a3d57235b770daf1c35f60c74e01754a5dac05071
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        logo.jpg
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\logo.jpg
        • Size 409KB
        • SHA256 0e5d1925d0a87964fcd92b8c23007e826b3c43340d89a1f4f8a6d684e788a477
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\pyexpat.pyd
        • Size 193KB
        • SHA256 867012edb8a6acd2131c4698b69bb94e6ba07607035e7c621aaa24262817e55b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\python3.DLL
        • Size 64KB
        • SHA256 ddd2c77222e2c693ef73d142422d6bf37d6a37deead17e70741b0ac5c9fe095b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python311.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\python311.dll
        • Size 5.5MB
        • SHA256 aa1e959dcff75a343b448a797d8a5a041eb03b27565a30f70fd081df7a285038
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\select.pyd
        • Size 28KB
        • SHA256 813eede996fc08e1c9a6d45aaa4cbae1e82e781d69885680a358b4d818cfc0d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\shiboken6\MSVCP140.dll
        • Size 536KB
        • SHA256 005f2324c7ff79bbe9a44992b0708abb4c871bd24bcc7a34aca5eab4439c1f4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Shiboken.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\shiboken6\Shiboken.pyd
        • Size 32KB
        • SHA256 0e2c5318c5ac60a016a12230bbb1f6a9d990c45cbf4a7c4af24aefb5ab7dc40a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\shiboken6\VCRUNTIME140_1.dll
        • Size 40KB
        • SHA256 e4d7ea5f4f4ff6d0c208e693853617cdef0ad71cfe5dd5c3ae16c8a6b64c18ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        shiboken6.abi3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\shiboken6\shiboken6.abi3.dll
        • Size 375KB
        • SHA256 47f4f9b44c95037565dd14f4be04f350f20c53c05483b750e0be867c39a7441e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50802\unicodedata.pyd
        • Size 1.1MB
        • SHA256 175c4cb528f1ac4e285c575cc3f5e85ec4b3ae88860210b5d795b580c7f0b5d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1996-240-0x00007FFD0D3F0000-0x00007FFD0D723000-memory.dmp
        Download

        memory/1996-253-0x00007FFD00070000-0x00007FFD0042B000-memory.dmp
        Download

        memory/1996-254-0x000002AC24F00000-0x000002AC24F10000-memory.dmp
        Download