ANY RUN2021.6.12-Lunar Client v2.7.3

BFAX

2021.6.3-MB数据库日更API已收录该样本
----------------------------------------------------------------------
Lunar Client本是一个MC的MOD，而ANY RUN的报告中显示这个Lunar Client v2.7.3.exe程序动了Chrome扩展文件夹。。。
https://any.run/report/2b802605ece335f6ff05062be544b40fc7e939c69391fbbaa4e930f5d621d064/593aa1f3-1ca7-4b57-8c0e-d6dbeb1d4103

MALICIOUS	SUSPICIOUS	INFO
Loads dropped or rewritten executable Lunar Client v2.7.3.exe (PID: 1252)	Modifies files in Chrome extension folder chrome.exe (PID: 2516) Executable content was dropped or overwritten Lunar Client v2.7.3.exe (PID: 1252)	Reads the hosts file chrome.exe (PID: 1944) chrome.exe (PID: 2516) Manual execution by user chrome.exe (PID: 2516) Application launched itself chrome.exe (PID: 2516)

正在缓冲

嗯……
VirusTotal    Trusted application Lunar Client v2.7.3.exe - Intezer

浪里个浪9527

扫描双击  miss

BFAX

正在缓冲 发表于 2021-6-12 19:33
嗯……
VirusTotal    Trusted application Lunar Client v2.7.3.exe - Intezer

我不太明白的是，我在网上查到这程序不是个MC的MOD么，为啥要动Chrome扩展文件夹下的文件呢？

846472713

奇安信 未报