Overview
overview
3Static
static
3MoonOTS/d3...47.dll
windows10-2004-x64
3modules/cl...ent.js
windows10-2004-x64
3modules/cl...ent.js
windows11-ltsc_2024-x64
3modules/cl...ist.js
windows10-2004-x64
3modules/cl...ist.js
windows11-ltsc_2024-x64
3modules/cl...me.bat
windows10-2004-x64
3modules/cl...me.bat
windows11-ltsc_2024-x64
3modules/cl...les.js
windows10-2004-x64
3modules/cl...les.js
windows11-ltsc_2024-x64
3modules/cl...ns.bat
windows10-2004-x64
3modules/cl...ns.bat
windows11-ltsc_2024-x64
3modules/cl...nal.js
windows10-2004-x64
3modules/cl...nal.js
windows11-ltsc_2024-x64
3modules/cl...dit.js
windows10-2004-x64
3modules/cl...dit.js
windows11-ltsc_2024-x64
3modules/cl...enu.js
windows10-2004-x64
3modules/cl...enu.js
windows11-ltsc_2024-x64
3modules/co...64.bat
windows10-2004-x64
3modules/co...64.bat
windows11-ltsc_2024-x64
3modules/co...als.js
windows10-2004-x64
3modules/co...als.js
windows11-ltsc_2024-x64
3modules/co...ttp.js
windows10-2004-x64
3modules/co...ttp.js
windows11-ltsc_2024-x64
3modules/co...on.bat
windows10-2004-x64
3modules/co...on.bat
windows11-ltsc_2024-x64
3modules/co...rd.bat
windows10-2004-x64
3modules/co...rd.bat
windows11-ltsc_2024-x64
3modules/co...use.js
windows10-2004-x64
3modules/co...use.js
windows11-ltsc_2024-x64
3modules/co...ct.bat
windows10-2004-x64
3modules/co...ct.bat
windows11-ltsc_2024-x64
3modules/co...le.bat
windows10-2004-x64
3General
- Target MoonOTS-Client-Windows.zip
- Size 44.1MB
- Sample261022-vpb3msws5p
- SHA256 5022b635ef26f26e119a0bb915c4f7ec6fbe4bf2fa5856dd2a141aea57ae76cf
- MD5 1e270770d2c6c40c20fda38ed694f153
- SHA1 a8c8925793fe26c63a535c26c06094da9fd470d0
- SHA512 89ed974a4448698518d29f67336d6f1410363ab1f5bad5cbf7d8fd768482acb2fbe0e69c51e53ebcd8e71f3a4085736657f0b6eee23428469d525bbaf852208a
- SSDEEP 786432:y4b+83jlfBWLdoq7K+W24dH+bdROf1ARje99/WVMkGJEpIJa6QaTUiOWX5K7Z:aG5cBoq7PF4dH+bCfwi7OVaaCQmK7Z
- TLSH T1E1A733B15A35C8B6CA1FA838E71DD120E5C3438B8105E96FB84C62DCD7EB510ABB5F46
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
MoonOTS/d3dcompiler_47.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
modules/client/client.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral3
Sample
modules/client/client.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral4
Sample
modules/client_entergame/characterlist.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral5
Sample
modules/client_entergame/characterlist.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral6
Sample
modules/client_entergame/entergame.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral7
Sample
modules/client_entergame/entergame.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral8
Sample
modules/client_locales/locales.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral9
Sample
modules/client_locales/locales.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral10
Sample
modules/client_options/options.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral11
Sample
modules/client_options/options.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral12
Sample
modules/client_terminal/terminal.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral13
Sample
modules/client_terminal/terminal.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral14
Sample
modules/client_textedit/textedit.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral15
Sample
modules/client_textedit/textedit.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral16
Sample
modules/client_topmenu/topmenu.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral17
Sample
modules/client_topmenu/topmenu.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral18
Sample
modules/corelib/base64.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral19
Sample
modules/corelib/base64.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral20
Sample
modules/corelib/globals.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral21
Sample
modules/corelib/globals.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral22
Sample
modules/corelib/http.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral23
Sample
modules/corelib/http.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral24
Sample
modules/corelib/json.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral25
Sample
modules/corelib/json.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral26
Sample
modules/corelib/keyboard.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral27
Sample
modules/corelib/keyboard.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral28
Sample
modules/corelib/mouse.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral29
Sample
modules/corelib/mouse.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral30
Sample
modules/corelib/struct.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral31
Sample
modules/corelib/struct.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral32
Sample
modules/corelib/table.bat
Resource
win10v2004-20260911-en
Malware Config
Targets
-
- Target MoonOTS/d3dcompiler_47.dll
- Size 3.5MB
- SHA256 7d0d1290382ea0e44a3178446a0c202696237e27dbb5f8f0827691092b8f2228
- MD5 6bc4ada9a7cab72f49c564e6c86b4c3e
- SHA1 f0fba01542a0fbe585106f7efd884df65e8c89dc
- SHA512 d7ec39514c104b40a42cd3ca956ba84f5a78f237a39f40d85ba54983145bce2dfbc7ec5e0cbc1bf8ab64d1d370371a7cba5e30202d2c1f37782db32486ed7f6e
- SSDEEP 49152:nqr33AJsOB8SLXId6mEjWEmNZMKRMbDhQc6555Rqp28ITdGS90tQhveWja37PLE3:nyUa6PcMbWD86dGZR
- TLSH T1C0068D21FE018072E8CB01B265AE7F6A947C5730477451C351D4AEE6EC706E36F3ABA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modules/client/client.lua
- Size 3KB
- SHA256 c2d8bdbb12bd2f4b5fe06d546651e2cb72d24645405e70891fe22eb0c5075c16
- MD5 bb201bdaaf38ffdd043d7d61a210bc93
- SHA1 7be2ab86f9a0117a5390acc11b9fcd13e84ba7f1
- SHA512 d547c88672b4065ad03ec3ce2f0920cf05f11c1fc6c733d107fa1390d94ef1221fb2b9195dded2f79ae0f8fa41db21d07000757f435d730c0be779c321d18c49
- TLSH T1DE7184C7744501625353AA62917B770A397110AA2221FA6573DC42A4EFE338FC1B37ED
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target modules/client_entergame/characterlist.lua
- Size 14KB
- SHA256 492a9f51f97bd7579018621a636faba7ceac1a32eb2a3310aa5351d13f2d9adb
- MD5 f65232542f87138681ae9ca361343f67
- SHA1 4e8a1b146b2e2b39ff3677d858bba148d94915c5
- SHA512 4a9ad36e992c9faa0966981af135db5a194d799c35b3dff4ebc0f954e95b9716e8b241b07812550561b2c9d6c2bf23bdf178346462b0979242fa0d1dbacd0110
- SSDEEP 192:cfB+/1IkDUT/sFL1++hed4lFTNCRA68ECBbTMoRiGX/CRJNxlqJWgW8MxVV8PkI6:G+/1yK5++agTt9sGX6bKgwcZ/Ce5mgwA
- TLSH T16262750BB1C6053253DB0159A457AB019A18646B130B5A6879CE60D4FF7B3DFA1F3BEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modules/client_entergame/entergame.lua
- Size 29KB
- SHA256 74d7dd7e60ea9878fd37182c40cceda1e94ad8570478d0c20b2f09794b67ea1d
- MD5 90d12758ec44a16278e227b12bfb5727
- SHA1 f265878f3af8957caf5fc966cb6b1169e523b85d
- SHA512 90b7a68761feda7779cbbc9ebd7e83752782f47d2785ee821e5f8698cce7c4c0436a94b0d48c671b1abd57b6ab12484cbdf96bc556242b24343e439231988200
- SSDEEP 384:aAAx06q3tlC/DRl/FKFCeKskEJ7P4U7jmoCBFZhxVWdgsEwCOyG3OaIj:hAx06WlC/DXFKFCeLLP4Og1OGGk
- TLSH T1DBD2840BB28319B643D642D094979601BB6DE05B120A097C77CD809B7FF6B9F52B37AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modules/client_locales/locales.lua
- Size 4KB
- SHA256 300ada69c4f9fb9dc29af9e32cfa213360f354b11063a0016e409916e3faa058
- MD5 a47d547797a2d5c261a7afeafa0cb5b8
- SHA1 91009bc5999581bfbe60a0b160eb8887fe8ab6e6
- SHA512 83c299c0b8e8c0602164bfe732ecaf97ca0c9d8c047adedf51d07ee38629d76f36f02fafae74375e2be45b4de5594985f59664317df320ab12cc3f22afec1fb4
- SSDEEP 96:a2Zzt9R7ASL+nR6+sMb20Jj2F/eDCw0sjnV4tVUmxq/MxCOPhfNCyR1NL09nNzHK:aGzt9RUpA+sMb20V2A+w0sjnVUM/lGGo
- TLSH T18FA102DE31135533621623954ECB02186E25520B211B5F39BAEFC0822F8AB5E53FB77E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modules/client_options/options.lua
- Size 13KB
- SHA256 51fc2b2af5fe3d22eed7a6b9c79cebdff363fec91785d4e92c658cdffbd00a65
- MD5 92fb02287f9f79a3db61ca511ee91601
- SHA1 f790c2a15ba465c00585c3d1aba4eca41a1620a5
- SHA512 4fcb888e10917acdf911ed90b27a1bb55992f17ec9dda62102faa0f8949de8e1d7056d0e69b9f527795a827999f828513534bc082e29eef462e6cec8d115c2a0
- SSDEEP 384:EPpCV++3v8Ao5+cNWgPC3PPZ48p2izd6blOI47eiHsWE:ECuPv4/E
- TLSH T10A52C82B71D923B1C2E764B2A8B792415E3E66620005B874796C81C13F8573ED2FF79E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modules/client_terminal/terminal.lua
- Size 10KB
- SHA256 f2f581ce2557616edfef73c588aad861dbff540805fa1ae44e9a82df5595170a
- MD5 052bd45a8b626d3c70865f7f5d51854c
- SHA1 92db77f905e943a1a7d89926b553a97a65c8e6fe
- SHA512 c751ae1139ce0a2d186e8300e1e34244afc3ebb8c201c518051e6ac3230db259a3926b3e3364196e9271a0495b5c7287cb709f56d336fc61252a34788a968d5c
- SSDEEP 192:2tkqguLEuJaPyZJt2t4llzz2DtYJqI/Dp50nIud0wVBuYkJinOePnYiDTdxjmPVW:OzjYaUclzz2OJzquYpYiDRxwKbtOfJBM
- TLSH T16F32534B3CFE2671C75254B8B4CF4705779B626318068192B5BC59C02F922AEC1F7AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modules/client_textedit/textedit.lua
- Size 3KB
- SHA256 8814cedb7a74f6649d61863f29dc00ec3d93757ffe08b5e12020d66503b87df7
- MD5 526d60896e59acc9b9efd73b42885a1e
- SHA1 727b57869417bc9bbb5438f9d47e94505af74145
- SHA512 b0e6701c56d26147e497ee399d3e450715a668930de95f4bd23cc97ef99d137fd64a05446594006470cd1525443c50c4d980079ce50e914057443251c5359c4c
- TLSH T10481F30ABC16327056B361E04997B70A663B92720544C0A0B5CC83D17FB27BBE6F7BD8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target modules/client_topmenu/topmenu.lua
- Size 7KB
- SHA256 147a488f35ef619356019aaa9f151bc0b4133bb6f4455931e720286ed0a5fede
- MD5 72d7aac6edae823f1eff3f973b286440
- SHA1 f9a3d5f96f04843e75d2dc21be7542a5385f9973
- SHA512 c81a4c2f89e0aaa35b22e6166b245353b12f71beaef5d15daeab3e39eb54f791ec6bc63d5c2a2f477374c5983cfd5cfc1be453aa626936dd0f8d2e2245ef83dd
- SSDEEP 192:S2anHOqdClcdf983N9F9qJ5wCewv7QTNwXXFpQXF+dXFeQXF7Fp2CNybQGbC2O3:S2O3kCfW9F7CbvsJ6XFeXFgXFpXF7Fpp
- TLSH T19BF10E9D60012373C3AAA37095A7801CBFAD256705166C90B2CD52CD6BD136AE2FF76F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modules/corelib/base64.lua
- Size 5KB
- SHA256 e418d092b6323bdd628ca42bff54601e72b0d376a1102f4e0afe07f9e17e68d3
- MD5 fecf62c92a75eb292b710380d177acc5
- SHA1 3be477ebda72eecc7e58de093755cd6cd1a28455
- SHA512 b2851343c559bd98cf2ad4e68aba0414d8c03e40ee2268d87e389486d9ad0e5db072a6ac1053456becc3cc8e2165ecaf66b5fa402cd82fdda9caed557fe50ef8
- SSDEEP 96:Z2XZh5s+VNLYMfjNLi1Ck/+RLGADA5O57zCxh9wjcuHQHTom:IX73HLbfRoCk/uCADbPCxh9wtQHTv
- TLSH T1E4B162CD33CBCA552BC943A7DC279809F76CB829516E52807EBE23D29D2451D41F3A38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modules/corelib/globals.lua
- Size 1KB
- SHA256 89b28a6db0db7f7387af669db9f8c205bb5848a11d1561528128315ea93be601
- MD5 55a2124b26277b8fee900f69a962d75d
- SHA1 554208e768cb84df7cca1d9f28e281262dc11a04
- SHA512 503d85380d7a1fed9b825de0d99a0347dc6c8d81d8550d2174083e5245c5448d2c8d48339622af37b6cb29d252e1a2a0cb9439047bc5eff261c59853b17ea789
- TLSH T19431C00C900616A1D66DFB94F78B2F47B07895870B3891ABA45C0A98726526DC3EBD6C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target modules/corelib/http.lua
- Size 7KB
- SHA256 58bd10fb760eeacac23acd8bc4e73c9ba7d360c607ba733d5316b5216c2836d2
- MD5 d2ace102c698fc850e6f1371f73440e4
- SHA1 3edd40a57e47361ec41a33bee6c3cd0555f02ec2
- SHA512 b9247f736fc418b3890431fd345bde31a5a74993737c9a031d273b4a15914171eae3eff3266ce2baa12255fb15efe0033d1753ff9e7b3fd58635b8dfbc9895b3
- SSDEEP 192:XjlSVIeNVbZM6rc0L0+4JS9KA9E5f4d5ScOO+:XsXNV2z
- TLSH T1E7F169CE7903367415AB9783666B6500AE78A1221198E5A673DE02C0FB54735F3B3BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modules/corelib/json.lua
- Size 10KB
- SHA256 38c42e8400990dfed19ab52488305bec879c3e64dd4e79cc66ad42df37265dc0
- MD5 1c6f387bce6ac5d083276d64e6a5b5ef
- SHA1 99f73c6fb6cc4429cc9ee48fe088a6294084c416
- SHA512 b83592cbcf49a4f305697fd5791c93066d088a0af80fd481511782f3a1ba7e5eadb1953b63483263ae76f8249e90ae6c9a0a81d90dec9887fb90df73b544d0a5
- SSDEEP 192:2PrQH4UO6JCTDQsMcK4MQwQD153QeQDLGk+TuvL6UXZPek2phPqTWgObsprgtUlY:urnUO6JCTDQsM94MQwQTQeQXGkwWL60I
- TLSH T1C932030ADD8206751BA2C361ECAB1626F7BD300212142D6E78DD10A46F7666D86FFF6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modules/corelib/keyboard.lua
- Size 7KB
- SHA256 98f75daf8111e874084f26372e2df00119410c54c1ef73e6f4fc4ef27547899d
- MD5 aa1a6b3666fb384785b6dc8dac5a8b9c
- SHA1 e0fa3f8c0c7ecea710b7ffc05d08b9a0b4294cbd
- SHA512 88b38674343ebb6e572933065ba6b693d953a315c570130869ee37ed9f292fd91bdd610bdaa1339e5f52d5572b6bac25beec8d33e23efbfd080c4cb380d2e477
- SSDEEP 192:q0jyx9E9NWr3gWXK+36WIKawcjoRGblbfbmzX/s/0/j8Krbk:q0jyx9E9NCXdio90sK
- TLSH T1B0F11347A00375A09F01BEF3518B5524229DEA68482B05E1B7BCF3E53F516AD826F71E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modules/corelib/mouse.lua
- Size 1KB
- SHA256 f01741146f02536ce932a06df4ea18f99c0b645aebf0225a6f7c4caac3e66e86
- MD5 b10d971a32578ee9cbfe6432b0d33f5c
- SHA1 e3653fc2e4a30ac29d429a6dfd53cb46a86160fa
- SHA512 559df8a57aea5863b6b09983b014767ec87dab8cb181b31fd0d68b3d7980445206eca50cb3108ecada7174a6a026fafe75af0b3f1c4c01a1f2907aad6c38e51b
- TLSH T17711878F605562732753FB11103F422F7E24029292AAADA274FC51D0BFA02B593BE94F
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target modules/corelib/struct.lua
- Size 4KB
- SHA256 2c84ff80c35abd34f80eefa8c9e3a07af679bb080c4091121bf2ca3efa60d2e8
- MD5 884e7c6f485473e827671ad5c9d7d018
- SHA1 75b070e73a17e93dddc883408392718167a79432
- SHA512 b8cc4c06a821ab3f25850e9ed552cb661d450908b4f0acff823982860dcc54f9fa25dcce6f1380ec49e4a5d953d47a886693f2491be4984c90e25084330507e9
- SSDEEP 96:3HkGfzPyKz0ikYuFsrCSasyYPHkGfJCIP24mbViTTiY7:XkMryKz0ikDsrCSasy2kMJCU24KiTTiA
- TLSH T1DEA1DB4A4B012974A76793A19CA71D207B59A013A625213AB47F0291BF10F3CD3B2BF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modules/corelib/table.lua
- Size 5KB
- SHA256 abadc38747faa1e7668365587ca5d1080926db6f32a3241cc3d8522cc3bb400e
- MD5 198a4631a6e47088c25a30a38b532988
- SHA1 c6818cbf18cb168313d46494e8b66c64aa355e52
- SHA512 36c08baf10b67c1cfca0eca8daeb0c2526c105c20d88f5918da91de36a2e737eda1f191aef5d6b05917b1b662116d69de9d1bf16143301f6cf36d32591216a75
- SSDEEP 96:wbsGwOphWt1THBZgY07hlSNYe0Y2J3eMgGjXG2eE:ysGwO/Wt1THBZ/07hsYLY2J3eMg8L
- TLSH T195C1EF4BF682743013A2C9B0649B4839BE5E785219960578F1DE81E13FA263EC3F5F69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10