4fd38fce6859a66fe8fdbf6d6d0ffa6cf307e4005c0b47fa9abe14d6b9dddb09

Resubmissions

24/10/2026, 23:32

261024-3jpqjssx5k8

24/10/2026, 23:01

261024-2zls6afh858

Analysis

max time kernel
149s
max time network
123s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/10/2026, 23:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LunarLoader/Debug/Debug.exe
Size 928KB
Sample261024-2zls6afh85
SHA256 4fd38fce6859a66fe8fdbf6d6d0ffa6cf307e4005c0b47fa9abe14d6b9dddb09
MD5 a4129faea3ec88b5624ca3d991a8ff05
SHA1 83b2ac2570a5ba5def672b9cb47121375a86851d
SHA512 9915dc6a1e7bed6236b2db81f1a569e5ad9964f6898ef62606a66a56a86e4a8e414ed36e3dc3e17f53b51affb31f8ee35a402feccef79eb251a55c49e114b336
SSDEEP 12288:g3SA5UVFcWbXEbr9MczThKAQ1Movm8odC1nwG/penX8zoeVvEY:eV5UUEUbr7fUj1MiPenszbVvEY
TLSH
T15C15CF06F2D442ACC017D9788977E31BEB36B89607265BC733E855A56F934D4AF3BA00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 1 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
3436	Debug.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3436	Debug.exe

C:\Users\Admin\AppData\Local\Temp\LunarLoader\Debug\Debug.exe
"C:\Users\Admin\AppData\Local\Temp\LunarLoader\Debug\Debug.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:3436

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads