Overview

overview

7

Static

static

3

luntik-x.exe-1.exe

windows10-2004-x64

7

luntik-x.exe-1.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    132s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/09/2026, 09:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    luntik-x.exe-1.exe
  • Size 87.5MB
  • Sample260925-ldvaeavs5r
  • SHA256 9e8a3f1e3cee8465cdde3644532de71a7f047c76457b31c9d1ab7949d70b27b0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 35 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\luntik-x.exe-1.exe
    "C:\Users\Admin\AppData\Local\Temp\luntik-x.exe-1.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1128

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AdvTray.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\AdvTray.mfx
        • Size 91KB
        • SHA256 3ce677ab1b30b562da582c564906d85c63e1bc8fc31e68ede0d08abb5183a137
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        KcCursor.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\KcCursor.mfx
        • Size 36KB
        • SHA256 0ded66f7b955cbf24fd70bf8c6366d54895fb879967e7855ce8e90ae85556da9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        KcSyso.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\KcSyso.mfx
        • Size 24KB
        • SHA256 96396c1e6eab93f7a4543afb4c4b907ccdfc80ddc3d125b0fc96a680889dce42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ObjResize.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\ObjResize.mfx
        • Size 85KB
        • SHA256 7fd5c322d91978c517fd056f95a2bb6a3a55db174360ab85af26b2448aaebd89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        adshow.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\adshow.mfx
        • Size 40KB
        • SHA256 a78548b6f022199d24dff22cdfd5c1c48a4a9cac2396b10803c181fe12833ae2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        aviflt.ift
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\aviflt.ift
        • Size 24KB
        • SHA256 0eeffe2fa3c93f3ef62ec357b481d6caac0d3d190fb997ebea623dc5fd674f8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bmpflt.ift
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\bmpflt.ift
        • Size 24KB
        • SHA256 b7eb74b793f9fb30439e54af504eefee675e73ec8342bd1be784225ded98cdf4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        clickteam-simple_ellipse.mvx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\clickteam-simple_ellipse.mvx
        • Size 28KB
        • SHA256 83899bd485b6c47c2d9c888a1edbc61492c4fbfeab41509d6a9a2f3d5ce4a668
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fliflt.ift
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\fliflt.ift
        • Size 28KB
        • SHA256 4fff120c0c69c1c853cbb5ff83f16a199bc2e4f45c6f8c564b22c3c10b546732
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gifflt.ift
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\gifflt.ift
        • Size 28KB
        • SHA256 4aa6628517c02816f033d79d386d7d817e7df74fe8cfae351312069fd4c61471
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jpgflt.ift
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\jpgflt.ift
        • Size 92KB
        • SHA256 23a54d3586092ccd82bc42bdab0c5ece75f68d1f6313e717a815746b38a7f857
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kcedit.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\kcedit.mfx
        • Size 32KB
        • SHA256 c229b36ce4e3cf824844931c0dfce165da22c234397cb1e8258d05f86decd053
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kcini.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\kcini.mfx
        • Size 28KB
        • SHA256 82c4f5af3c25a8daf60185833d3d61f2e8e2851ad640b59af54060eab6bc859e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mmf2d3d9.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\mmf2d3d9.dll
        • Size 1.1MB
        • SHA256 9eaa342059785bd584df956574c637e6d0e6016a099221a56e0397f8c86cd93f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mmfs2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\mmfs2.dll
        • Size 459KB
        • SHA256 c0d56cefb509e5600ac6b430adcaf53b81881d3fff4e62b7ede158d66d826622
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mode7ex.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\mode7ex.mfx
        • Size 37KB
        • SHA256 efc61853b403d5351898dc1ad96dcc0315d02bc41baf6277f49e8f18146de99e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mp3flt.sft
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\mp3flt.sft
        • Size 24KB
        • SHA256 cd5bd7cc59eaf42bc0edf418ce6f077f9db369d5e3c414107b82492a877a6176
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pcxflt.ift
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\pcxflt.ift
        • Size 24KB
        • SHA256 81ce5610214cc648f6e968af8f31c1bce0430e4e9dc4427bba743bc6aadcba4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pngflt.ift
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\pngflt.ift
        • Size 80KB
        • SHA256 7bdae43096b32eb072731a93e6423a848459f385a2f5859629af40e389273f7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tgaflt.ift
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\tgaflt.ift
        • Size 24KB
        • SHA256 bbfd34aa3f6a66e59f06e30103c6248eee54896364ee0c714819b9286b985880
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        waveflt.sft
        • Path C:\Users\Admin\AppData\Local\Temp\mrt42AC.tmp\waveflt.sft
        • Size 8KB
        • SHA256 41136b09b033a20b9acc430620ea095ff76afbdc7aebe7f26f7d2b4315afddef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1128-130-0x00000000027A0000-0x00000000027B7000-memory.dmp
        Download

        memory/1128-40-0x0000000000DB0000-0x0000000000EB5000-memory.dmp
        Download

        memory/1128-86-0x0000000000D90000-0x0000000000D9C000-memory.dmp
        Download

        memory/1128-49-0x0000000000DB0000-0x0000000000EB5000-memory.dmp
        Download

        memory/1128-44-0x0000000000DB0000-0x0000000000EB5000-memory.dmp
        Download

        memory/1128-75-0x0000000000D30000-0x0000000000D4B000-memory.dmp
        Download

        memory/1128-39-0x0000000000DB0000-0x0000000000EB5000-memory.dmp
        Download

        memory/1128-64-0x0000000000CF0000-0x0000000000D0A000-memory.dmp
        Download

        memory/1128-48-0x0000000000DB0000-0x0000000000EB5000-memory.dmp
        Download

        memory/1128-47-0x0000000000DB0000-0x0000000000EB5000-memory.dmp
        Download

        memory/1128-46-0x0000000000DB0000-0x0000000000EB5000-memory.dmp
        Download

        memory/1128-43-0x0000000000DB0000-0x0000000000EB5000-memory.dmp
        Download

        memory/1128-42-0x0000000000DB0000-0x0000000000EB5000-memory.dmp
        Download

        memory/1128-141-0x0000000002AD0000-0x0000000002AE4000-memory.dmp
        Download

        memory/1128-41-0x0000000000DB0000-0x0000000000EB5000-memory.dmp
        Download

        memory/1128-38-0x0000000000DB0000-0x0000000000EB5000-memory.dmp
        Download

        memory/1128-56-0x00000000746A0000-0x0000000074718000-memory.dmp
        Download

        memory/1128-55-0x00000000746A0000-0x0000000074718000-memory.dmp
        Download

        memory/1128-52-0x00000000746A0000-0x0000000074718000-memory.dmp
        Download

        memory/1128-51-0x00000000746A0000-0x0000000074718000-memory.dmp
        Download

        memory/1128-45-0x0000000000DB0000-0x0000000000EB5000-memory.dmp
        Download

        memory/1128-54-0x00000000746A0000-0x0000000074718000-memory.dmp
        Download

        memory/1128-53-0x00000000746A0000-0x0000000074718000-memory.dmp
        Download

        memory/1128-36-0x0000000000DB0000-0x0000000000EB5000-memory.dmp
        Download

        memory/1128-37-0x0000000000E35000-0x0000000000E36000-memory.dmp
        Download

        memory/1128-167-0x0000000000E35000-0x0000000000E36000-memory.dmp
        Download