Overview
overview
7Static
static
3MochaTools....4.exe
windows10-2004-x64
7MochaTools....4.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3Mocha Tools.exe
windows10-2004-x64
7Mocha Tools.exe
windows11-ltsc_2024-x64
7General
- Target MochaTools-Setup-6.0.4.exe
- Size 92.8MB
- Sample260627-e3spjsgx5v
- SHA256 7180a6dd4ea0a9c258853bc713076157f534b32a83ba85670f7be3f3c7abc8c0
- MD5 3b6d1e88833b9057d6d8887833fdf448
- SHA1 ec04103511adee56aac992b019025fb5cce5aef5
- SHA512 cf395e31c49f20bc518bd93cb42095fd69f4e0d10903c8fc5e174ecdd875f9ecb1f24da10e3911636b899a079c8ebbc09f024de68412ffe9342da53dedb8cd13
- SSDEEP 1572864:Xhlulez0atAIAa9/FudSYrLYfqaC/XpQDF3PgQ/tM7xnNiMPA0YaWn7M1GhyDJi7:XPvbtAIHulyqXpQDRgWeILaVEh28fHG2
- TLSH T1EE2833C1F276793AE311F9F5E5E92A83464250FAA7249D63FB60CA40FF0E1C21531B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
MochaTools-Setup-6.0.4.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
MochaTools-Setup-6.0.4.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
Mocha Tools.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Mocha Tools.exe
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target MochaTools-Setup-6.0.4.exe
- Size 92.8MB
- SHA256 7180a6dd4ea0a9c258853bc713076157f534b32a83ba85670f7be3f3c7abc8c0
- MD5 3b6d1e88833b9057d6d8887833fdf448
- SHA1 ec04103511adee56aac992b019025fb5cce5aef5
- SHA512 cf395e31c49f20bc518bd93cb42095fd69f4e0d10903c8fc5e174ecdd875f9ecb1f24da10e3911636b899a079c8ebbc09f024de68412ffe9342da53dedb8cd13
- SSDEEP 1572864:Xhlulez0atAIAa9/FudSYrLYfqaC/XpQDF3PgQ/tM7xnNiMPA0YaWn7M1GhyDJi7:XPvbtAIHulyqXpQDRgWeILaVEh28fHG2
- TLSH T1EE2833C1F276793AE311F9F5E5E92A83464250FAA7249D63FB60CA40FF0E1C21531B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Mocha Tools.exe
- Size 93.8MB
- SHA256 aa5da5d69f15c3855a62c32b96a4fe3eb8ed2e11e2556ac3e00619b552b16e17
- MD5 5513fc93019223c7c79c34b0de030414
- SHA1 b8f2a0dd5d70e4255483ee1aa821d236f40bc94f
- SHA512 55401ae687adf3d0480696156020a42ba04dc3a181cd1e6d873d77d775c742d3783c39bc3f7559afa1c9260bac7ec8208e0e5c5aa96a36339dcf1468a1a0b92e
- SSDEEP 1572864:1V8KSFkf+uMUgBw17R4JeYC0jyCFfLqYRVc27/9I1c5rZb2FyWC9rBpYiJ6Xpbnv:/81SGuMUCq4JtHRVc27/girOyTrQ/XpL
- TLSH T161283386B279832BF513E07CF1CB7940529170A3DF2A467A71F892E056CE1829DFFA15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL