General
- Target LunarLoader.zip
- Size 10.4MB
- Sample261024-2zls6afh85
- SHA256 afb846b578bfb16b822eeae9f9023e480c058d0d5333a749958b5a161a73a163
Score
8/10
Malware Config
Targets
-
- Target LunarLoader.zip
- Size 10.4MB
- SHA256 afb846b578bfb16b822eeae9f9023e480c058d0d5333a749958b5a161a73a163
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target LunarLoader/Checker/CarbonChecker.exe
- Size 1.7MB
- SHA256 769f6f0d241428069a1f6fc289a7ed1ebdde6e908bc580d5f6c6f235b6d6389e
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
- Target LunarLoader/Debug/Debug.exe
- Size 928KB
- SHA256 4fd38fce6859a66fe8fdbf6d6d0ffa6cf307e4005c0b47fa9abe14d6b9dddb09
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target LunarLoader/Loader/Loader.exe
- Size 9.5MB
- SHA256 1ef1c3a821a1869c290eb58fdf24788495b4c90f8b6dc0174770d2757b112bc8
Score1/10