Overview

overview

8

Static

static

3

Starlight_...1).zip

windows10-2004-x64

8

Starlight_...1).zip

windows11-ltsc_2024-x64

1

Starlight_...ER.exe

windows10-2004-x64

1

Starlight_...ER.exe

windows11-ltsc_2024-x64

1

Starlight_...or.exe

windows10-2004-x64

1

Starlight_...or.exe

windows11-ltsc_2024-x64

1

Starlight_...ad.txt

windows10-2004-x64

1

Starlight_...ad.txt

windows11-ltsc_2024-x64

1

Starlight_...me.bat

windows10-2004-x64

8

Starlight_...me.bat

windows11-ltsc_2024-x64

8

Starlight_...er.crt

windows10-2004-x64

1

Starlight_...er.crt

windows11-ltsc_2024-x64

1

Starlight_...er.pfx

windows10-2004-x64

1

Starlight_...er.pfx

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Starlight_Bypass Rebooted Crack(1).zip
  • Size 38.0MB
  • Sample260821-g7e1csab24
  • SHA256 983e1045a323fec534f14cb5f3a489958ff3d0642a9e1447e25ff73d186b1e23
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasionexecutionpersistenceprivilege_escalation

Malware Config

Targets

    • Target
      Starlight_Bypass Rebooted Crack(1).zip
    • Size 38.0MB
    • SHA256 983e1045a323fec534f14cb5f3a489958ff3d0642a9e1447e25ff73d186b1e23
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasionexecutionpersistenceprivilege_escalation

    • Drops file in Drivers directory

    • Executes dropped EXE

    behavioral1behavioral2
    • Target
      Starlight_Bypass Rebooted Crack/REBOOTEDSPOOFER.exe
    • Size 43.0MB
    • SHA256 702a9a60b898192ca046399b9ec0a3ff17c3126e5a030c691ffa0bc271b90eee
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      Starlight_Bypass Rebooted Crack/Starlight_Emulator.exe
    • Size 82KB
    • SHA256 a3adc9318074f79d3eaff1a04b271cbcb06d78670b181812999c63440d9a3222
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      Starlight_Bypass Rebooted Crack/read.txt
    • Size 238B
    • SHA256 4b924c4eae0ec331c837b79521c9d1588109197158c64ffb5c04cb0a299534c1
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      Starlight_Bypass Rebooted Crack/runme.bat
    • Size 2KB
    • SHA256 1cdc19d0b152457a49fdcc993e280cf5e1aed3ae61655f51e24409c7b8b4a5bc
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    defense_evasionexecutionpersistenceprivilege_escalation

    • Drops file in Drivers directory

    behavioral10behavioral9
    • Target
      Starlight_Bypass Rebooted Crack/server.crt
    • Size 1KB
    • SHA256 3a5252e6652f1a379b34d409097352608d1f0737e888a4f450243290ce727e27
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      Starlight_Bypass Rebooted Crack/server.pfx
    • Size 2KB
    • SHA256 a86c438032f56d49abd2e3b066b515ae5a67247fb1207a0d2ef0089d8598e10c
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v16

Tasks