Overview
overview
3Static
static
375ab4aaa2e...94.exe
windows7-x64
375ab4aaa2e...94.exe
windows10-2004-x64
3$PLUGINSDI...am.dll
windows7-x64
3$PLUGINSDI...am.dll
windows10-2004-x64
3$PLUGINSDI...eb.dll
windows7-x64
3$PLUGINSDI...eb.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
1$PLUGINSDI...LL.dll
windows10-2004-x64
1$PLUGINSDI...te.dll
windows7-x64
1$PLUGINSDI...te.dll
windows10-2004-x64
1$SYSDIR/Fi...er.dll
windows7-x64
1$SYSDIR/Fi...er.dll
windows10-2004-x64
1$_4_/FileMoa.exe
windows7-x64
1$_4_/FileMoa.exe
windows10-2004-x64
1$_4_/filemoaup.exe
windows7-x64
1$_4_/filemoaup.exe
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/01/2024, 22:28
Static task
static1
Behavioral task
behavioral1
Sample
75ab4aaa2ee68f26e6a52b744a99fe94.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
75ab4aaa2ee68f26e6a52b744a99fe94.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/DLLWaitForKillProgram.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/DLLWaitForKillProgram.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/DLLWeb.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/DLLWeb.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
$SYSDIR/FileMoaLauncher.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
$SYSDIR/FileMoaLauncher.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
$_4_/FileMoa.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
$_4_/FileMoa.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
$_4_/filemoaup.exe
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
$_4_/filemoaup.exe
Resource
win10v2004-20231222-en
General
-
Target
$_4_/FileMoa.exe
-
Size
160KB
-
MD5
38ba40454c3fae97edffcc0b8a8a7e9c
-
SHA1
53e20976da98b5cfad85fc32d81110ff00ec76fc
-
SHA256
7627db34c7b3a7439c20856d70afc91f992bb06b2dc3a9a020e44ba4e0635921
-
SHA512
18c4ddaa1742841c0e0b604b3ef447f7ba768d8c0e0758975331f8bcaad77b5f611b0ae1072a07e56de2dbb4a62c96ed115126ad4023efd643254862c1c50a36
-
SSDEEP
3072:yDbBNUsvLX2eGHgwXS833Xt+4kRdBu/VoNwVD5:y39ieGHgwXSunt+JRzu/VoN
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3020 FileMoa.exe 3020 FileMoa.exe 3020 FileMoa.exe 3020 FileMoa.exe