5a2542b3c2937b853463742bee54e1ba5f47d0f465640b3f288c290879a9dd24

Login
Reports

Overview

overview

Static

static

Lunar Clie...er.exe

windows11-21h2-x64

$PLUGINSDI...p.html

windows11-21h2-x64

$PLUGINSDI...x.html

windows11-21h2-x64

$PLUGINSDI...app.js

windows11-21h2-x64

$PLUGINSDI...uts.js

windows11-21h2-x64

$PLUGINSDI...dle.js

windows11-21h2-x64

$PLUGINSDI...min.js

windows11-21h2-x64

$PLUGINSDI...ons.js

windows11-21h2-x64

$PLUGINSDI...ics.js

windows11-21h2-x64

$PLUGINSDI...nds.js

windows11-21h2-x64

$PLUGINSDI...ies.js

windows11-21h2-x64

$PLUGINSDI...ate.js

windows11-21h2-x64

$PLUGINSDI...der.js

windows11-21h2-x64

$PLUGINSDI...ils.js

windows11-21h2-x64

$PLUGINSDI...ler.js

windows11-21h2-x64

$PLUGINSDI...ate.js

windows11-21h2-x64

$PLUGINSDI...ler.js

windows11-21h2-x64

$PLUGINSDI...ate.js

windows11-21h2-x64

$PLUGINSDI...ler.js

windows11-21h2-x64

$PLUGINSDI...ate.js

windows11-21h2-x64

$PLUGINSDI...ler.js

windows11-21h2-x64

$PLUGINSDI...ate.js

windows11-21h2-x64

$PLUGINSDI...ler.js

windows11-21h2-x64

$PLUGINSDI...ate.js

windows11-21h2-x64

$PLUGINSDI...ler.js

windows11-21h2-x64

$PLUGINSDI...ler.js

windows11-21h2-x64

$PLUGINSDI...ate.js

windows11-21h2-x64

$PLUGINSDI...ler.js

windows11-21h2-x64

$PLUGINSDI...ate.js

windows11-21h2-x64

$PLUGINSDI...ler.js

windows11-21h2-x64

$PLUGINSDI...ate.js

windows11-21h2-x64

$PLUGINSDI...ate.js

windows11-21h2-x64

Analysis

max time kernel
898s
max time network
484s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/10/2026, 10:59

Sharing

Copy URL Twitter E-mail

Static task

static1

3 signatures

upx

Behavioral task

behavioral1

Sample

Lunar Client - Installer.exe

Resource

win11-20260911-en

windows11-21h2-x64

38 signatures

900 seconds

adware defense_evasion discovery persistence privilege_escalation spyware stealer trojan

Behavioral task

behavioral2

Sample

$PLUGINSDIR/app/cmp.html

Resource

win11-20260911-en

windows11-21h2-x64

17 signatures

900 seconds

discovery persistence ransomware

Behavioral task

behavioral3

Sample

$PLUGINSDIR/app/index.html

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

900 seconds

discovery

Behavioral task

behavioral4

Sample

$PLUGINSDIR/app/js/app.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral5

Sample

$PLUGINSDIR/app/js/block_inputs.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral6

Sample

$PLUGINSDIR/app/js/libs/cmp.bundle.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral7

Sample

$PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral8

Sample

$PLUGINSDIR/app/js/models/notifications.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral9

Sample

$PLUGINSDIR/app/js/utils/analytics.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral10

Sample

$PLUGINSDIR/app/js/utils/commands.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral11

Sample

$PLUGINSDIR/app/js/utils/cookies.js

Resource

win11-20260911-en

windows11-21h2-x64

15 signatures

900 seconds

discovery execution

Behavioral task

behavioral12

Sample

$PLUGINSDIR/app/js/utils/modal-events-delegate.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral13

Sample

$PLUGINSDIR/app/js/utils/strings-loader.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral14

Sample

$PLUGINSDIR/app/js/utils/utils.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral15

Sample

$PLUGINSDIR/app/js/windows/cri/cri-controller.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral16

Sample

$PLUGINSDIR/app/js/windows/cri/template.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral17

Sample

$PLUGINSDIR/app/js/windows/cris/cris-controller.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral18

Sample

$PLUGINSDIR/app/js/windows/cris/template.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral19

Sample

$PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral20

Sample

$PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral21

Sample

$PLUGINSDIR/app/js/windows/finish/finish-controller.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral22

Sample

$PLUGINSDIR/app/js/windows/finish/template.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral23

Sample

$PLUGINSDIR/app/js/windows/main/main-controller.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral24

Sample

$PLUGINSDIR/app/js/windows/main/template.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral25

Sample

$PLUGINSDIR/app/js/windows/modal/modal-controller.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral26

Sample

$PLUGINSDIR/app/js/windows/privacy/privacy-controller.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral27

Sample

$PLUGINSDIR/app/js/windows/privacy/template.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral28

Sample

$PLUGINSDIR/app/js/windows/progress/progress-1-controller.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral29

Sample

$PLUGINSDIR/app/js/windows/progress/template.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral30

Sample

$PLUGINSDIR/app/js/windows/settings/settings-controller.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral31

Sample

$PLUGINSDIR/app/js/windows/settings/template.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral32

Sample

$PLUGINSDIR/app/js/windows/welcome/template.js

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Report Analysis Logs

General

Target
$PLUGINSDIR/app/js/windows/privacy/privacy-controller.js
Size 3KB
Sample261011-m3jqmsgf45
SHA256 5a2542b3c2937b853463742bee54e1ba5f47d0f465640b3f288c290879a9dd24
MD5 8c1b7b03ff6bb4fe149c76527d3bab1a
SHA1 f7a68ed7fac1927a90df193faadbcb2f5636e043
SHA512 4110b7c415b41fb41b144781e3a3cd890bd77c3f366b868f233b77ec193cfbcb91f4794a8fa70a0a5e888cea98650c9153c38dc47272eaff31d31cc8633983a8
TLSH
T1C9611FBE60B845741537633ADF2AA344F6B2422FA445CD1B3EBC9B811FF28164246FD8
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\app\js\windows\privacy\privacy-controller.js
1⤵
PID:5684

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads