General
- Target Lunar-Patcher-v9.exe
- Size 74.5MB
- Sample260816-ay9eaaxtgv
- SHA256 24011df44749540dd411135847e42355aece975d75f8a4d8dcbbbd7c98556a98
- MD5 459f3a4cce8aae3428b9315973bae605
- SHA1 bb7cc2ba5b598c89cda9f7b803296c58b6866f11
- SHA512 3d0838532533c2a0fa6d1a717639e672f3411c5dc31665941090af2eaaa7ef0fe0f4acc4f9f2a542cfbb4c1565bf6675e648c48c6ab7bd7d424ce0956ac411eb
- SSDEEP 1572864:8lmG+3KCdVZlQ7EOXk65tQcaddN4OeS+TiRpVrtKpbBiKOcH8B+1Ejd:SmG+3/vlW9ku9IdKHS+eXVrtIbwKXVY
- TLSH T18108333B7687203EC4685E35B4B68221953BAF61AC11D82BC9E4B05CDF325F1197FA87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
Lunar-Patcher-v9.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
Lunar-Patcher-v9.exe
Resource
win11ltsc2024-20260710-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Lunar-Patcher-v9.exe
- Size 74.5MB
- SHA256 24011df44749540dd411135847e42355aece975d75f8a4d8dcbbbd7c98556a98
- MD5 459f3a4cce8aae3428b9315973bae605
- SHA1 bb7cc2ba5b598c89cda9f7b803296c58b6866f11
- SHA512 3d0838532533c2a0fa6d1a717639e672f3411c5dc31665941090af2eaaa7ef0fe0f4acc4f9f2a542cfbb4c1565bf6675e648c48c6ab7bd7d424ce0956ac411eb
- SSDEEP 1572864:8lmG+3KCdVZlQ7EOXk65tQcaddN4OeS+TiRpVrtKpbBiKOcH8B+1Ejd:SmG+3/vlW9ku9IdKHS+eXVrtIbwKXVY
- TLSH T18108333B7687203EC4685E35B4B68221953BAF61AC11D82BC9E4B05CDF325F1197FA87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1