ecd29960bc744e4232c8b76abb30d5675885d0911314203f5243df27884e147e | Triage™

Login
Reports

Overview

overview

6

Static

static

6

Payload/Lu....dylib

macos-10.15-amd64

1

Payload/Lu....dylib

macos-10.15-amd64

1

Payload/Lu....dylib

macos-10.15-amd64

1

Payload/Lu....dylib

macos-10.15-amd64

1

Payload/Lu.../Lunar

macos-10.15-amd64

1

Payload/Lu...ts.pdf

windows10-2004-x64

3

Payload/Lu...ts.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Lunar-Proxy-for-Minecraft-PE-IPAOMTK.COM.ipa
Size 39.2MB
Sample260827-qhdwfavfmf
SHA256 ecd29960bc744e4232c8b76abb30d5675885d0911314203f5243df27884e147e
MD5 1c760bf304d563cb94031a9b9b7b9d25
SHA1 8ded99022d6f852d8659e66c5cc8c163b2b43046
SHA512 cff58d9631a9a6d709d055e63d43190be36c276f48d4f45160fe05a5e4d6439678d3bb5140d9033f2c70c82ef6fb8266c236a7ad26227c607ae3642e6e36178a
SSDEEP 786432:d7w6MtPtLCnLEbBY8QXN4CYc5kIuNfzOfiO1r2MvGP7vLOc9ffkkWW6sTcsK0b/+:d7w/LCLIBoj5zu1OaAr2GGP71XfRfE
TLSH
T1239733E5D931C9A6FC59EB31C1A21B14953D74EA9CBACC374E0E8E17D0E3A61F4A1123
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

adware discovery evasion macos pdf spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Payload/Lunar.app/Frameworks/3BodSyPlus.dylib

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Payload/Lunar.app/Frameworks/Fixipa1.dylib

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Payload/Lunar.app/Frameworks/Fixipa2.dylib

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Payload/Lunar.app/Frameworks/libsubstrate.dylib

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Payload/Lunar.app/Lunar

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Payload/Lunar.app/SuperwallKit.bundle/Assets.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral7

Sample

Payload/Lunar.app/SuperwallKit.bundle/Assets.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

adware discovery spyware

Malware Config

Targets

- Target
  Payload/Lunar.app/Frameworks/3BodSyPlus.dylib
- Size 463KB
- SHA256 526336591e361db9e2d0e8e177d6b85fa012d62706678a873e08701b48024c0a
- MD5 3767c8b096fea30b1f32ddb7eae0c3f9
- SHA1 e2f597bf05a81168e0c435e41860053584d513f4
- SHA512 3651d58b1e405e79124e5f5e720b6f6f8f6acaf1bdd86b39cdce8c3d7a8be61f2b803624a412ed07711ade81871ca81e3287d4675f1f85d9c9360fafdd18fc3a
- SSDEEP 6144:CoIbqdgot815jHeYn5C7WxjFfjjUr8g5BI+wwTb47VtukUdKkZ5JQGp:Cbqdgot8PjvJUr8g5BI7GoG
- TLSH
  T1F5A4F841BE5C2D66D1C6713E5C529658317FB621A322C3F27D32063CCFCD6A06A36B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Payload/Lunar.app/Frameworks/Fixipa1.dylib
- Size 196KB
- SHA256 cec96152bf28bb56d44b84ea235adeb8f5959d087bb6e83c50a0d99dbe04959b
- MD5 963159694ed97b927e5a5acab93c0706
- SHA1 08666e7d198c3fe53f872f5d77fa342947fdf3a4
- SHA512 bd7c00e7a99c2e5315f0fb5bca09005b57b184e463a01ac9e1d49ddd00998da342669c8c1bca0f2a1e8d1b52347bd4d3f3e235ace00a4c9d391153fd2be65944
- SSDEEP 768:6vPjjBNbJ967DeQCStC5ecljxhlefaImOBtTiGc2t729oQxzNvCYhWt:6vP/BL6eGAplefaIJBtTiGc2tS9Vv74t
- TLSH
  T1F214F95AFF480997C9CF02BD81184F1DF03DE378DB81C5E6A5F4C9A98E916938E16A07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Payload/Lunar.app/Frameworks/Fixipa2.dylib
- Size 82KB
- SHA256 17242b8eebb95b5856e7261adad7db68034890cede82d713b49170035f759cf2
- MD5 f6fd980a41f8b42b8a3ba563dbb5faa2
- SHA1 88b6aedb5e9f4ca2df17fee04dfaa30d664222a1
- SHA512 5697e9b412e6018256471c787b2f1bceb442839ab7303b9f134dc3f8b93836e83c1a07b932be5acc8b6c814f859befaf8bd8f26c6aff6be8fa021924f414e7c9
- SSDEEP 384:Bf75OlMHBBcJQ4lsxHJC9LA2OmfUVGbbrZbL4bHmygaBqBGVLI8hm1Z3q1QrI8DA:Bf702BBcJQPxHJC9LA2OmfUVFyNfnI
- TLSH
  T1A7839453BF8C1A5BC9CA52BD80544B28B03FE378C761C6E778F1C9AE4D917831925A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Payload/Lunar.app/Frameworks/libsubstrate.dylib
- Size 267KB
- SHA256 04a5aa8b767666bedb55744856f049f37ffe8e5eb09690af437a77eb7ed3084b
- MD5 d02ef43209236782e251f12c06982861
- SHA1 08f27c810310ef1c2c9a9e4d750b7bedebd648d5
- SHA512 55f23428d6125244e21ae4408bf23c8fb77893f06df077cafc31eb8618581400c20b469cd8cb764a5192795a9b7d2413eff44b3bcad4933fdcb330ab3e75fffc
- SSDEEP 1536:0JinRNQeUcaaRv45q/KAumhRXjgZGjX/sj3ADz0O:0JinfQ/MRgK4mhlsZUkT4o
- TLSH
  T1B0446503EE86A6D9DECFA93A4A0B37EA239358D4FEF351E7B4DB9044C44C1C1542D986
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Payload/Lunar.app/Lunar
- Size 65.6MB
- SHA256 95c07d05f27b0fb75a68abd37ea2e3e508e852da03b283aba8abd35dbf96ef24
- MD5 4fa3f2eae2df3686b775f5533ee24a75
- SHA1 4521869b20b3fee3fdfb973c03cf006c38156900
- SHA512 b9a0bd90de5428b0a43c866fefdf7d3b546f4fa834d71c049202dabb258b18236a228c0f99bef4ec63e4b4a14190e7c6163502995cca9462e0b1c2c15ede80ec
- SSDEEP 786432:6GhT7ktOoCvxLJJwI4FIxDE8VT7G+dmJ06jjtM9GuXDD:6aixR5+dmmAjtarXD
- TLSH
  T1DFE79F55B84C38B6DDCAB37C6E050250B235FD544A91C39B3E39A63C9AB22C54B3BB71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Payload/Lunar.app/SuperwallKit.bundle/Assets.car
- Size 277KB
- SHA256 51be5a052d47ae1f30b341b2cdb0ea4d713302972170c6360f8dd9d03d29d44b
- MD5 371f7f3664300bd0e9a497126b5f2065
- SHA1 37d94ad840947df666e23b19cff9ead6c6c2cf27
- SHA512 7f0a47081413d3a4d4b4e4026b0ed79d9630a351950013c803af48819ef07c475f358f9f6c3310715817c6da5eab46aceaecc8ad0cc82c0da7fe57d159818e92
- SSDEEP 6144:rYDs9PG8RuDJlcOxy/vJ0MOzo25DDVr5N9a6uzh:rJpEDJaOk/GDhrxaF
- TLSH
  T19454D053F6194C1DE801C4B0D65F3F04AB6D7922B6E8A583542C636C767388AFEA3793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral6 behavioral7

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

adwarediscoveryspyware

behavioral7

adwarediscoveryspyware

© 2018-2026

Terms | Privacy