264aa4a9b7f961a234e8222ca3feb8d4b85ab36912dca8b1e3a2dfdcf4fb0aba

Sharing

Copy URL Twitter E-mail

General

Target
Moho Pro 13.zip
Size 533.6MB
Sample260728-e189hsaq6z
SHA256 264aa4a9b7f961a234e8222ca3feb8d4b85ab36912dca8b1e3a2dfdcf4fb0aba
MD5 b3bc02e5342485c510d422e976826ed8
SHA1 c54868e31cf2fe39e1e09b059f11ac6532a71346
SHA512 c390cdf784e87936b1ca1b232e076e4d730534cde9648362ff600158d71f929ddaa2df92a853cbe16d397829d233cd7b62c24422b88174a6175c04c710be674b
SSDEEP 12582912:xlAfFcczv4ATxtYAHj3fcWId90kZhX+5MSCWMQ5euRAbK3WWa04oqBfd7cXHN:Mn5YGcbd91hX+y/5FuKGWWal7c3N
TLSH
T14A49336652D422739AEE3AC580D49B8D1408361B2BF16970F386B6E8639F3F6F173744
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Moho Pro 13.zip
- Size 533.6MB
- SHA256 264aa4a9b7f961a234e8222ca3feb8d4b85ab36912dca8b1e3a2dfdcf4fb0aba
- MD5 b3bc02e5342485c510d422e976826ed8
- SHA1 c54868e31cf2fe39e1e09b059f11ac6532a71346
- SHA512 c390cdf784e87936b1ca1b232e076e4d730534cde9648362ff600158d71f929ddaa2df92a853cbe16d397829d233cd7b62c24422b88174a6175c04c710be674b
- SSDEEP 12582912:xlAfFcczv4ATxtYAHj3fcWId90kZhX+5MSCWMQ5euRAbK3WWa04oqBfd7cXHN:Mn5YGcbd91hX+y/5FuKGWWal7c3N
- TLSH
  T14A49336652D422739AEE3AC580D49B8D1408361B2BF16970F386B6E8639F3F6F173744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Moho Pro 13/C/Moho.exe
- Size 23.3MB
- SHA256 edb106f3a1c691b2f545fc82aa5336807eeb130897c8efa5256ad23a67753026
- MD5 aea4cf80f99c9fa344799f36d6826b9c
- SHA1 5faae20009e33a260719fb055a0258041be60573
- SHA512 eb22512728c5f5025d0663efcd8cb66e8bed484a93ddc7cd4880592bdcbbdd1bcf4fa300603b5a2fa3eef4028dded5f2ac48bca9b07db03b4f1e6d034974e0d7
- SSDEEP 393216:MPfc1KkSBfJLyKrWz+LvvYQm9pPUXHKbOz966LuEUSH2jMyg2IHYaNqsilB2a2O4:MMwkgBprWAvvYQApPUXqbOz0UdWg3Eyj
- TLSH
  T10037F06D6F00F68DDC6DF83EB6639B81B2A19C12401E669263617A16EF37D034CBD709
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Moho Pro 13/Moho 13.0.2.610 WinInstaller.msi
- Size 515.1MB
- SHA256 f072844a015b0bee0c426d02b7b9fb7c9e501a62899469133c12e763ab99b317
- MD5 0ff6ec29a3737f2e58c1980a98b6e44a
- SHA1 9eee521416da47597aab1610f65c839ae26ac66a
- SHA512 cef5d3ed9b5a21f3d339e52024d651b92e6c764891fbce64dc3f8ab2f80654e059f2dfbb1130b64178580a2d326670a1cb8ebe676bb5158acd2f916033a06659
- SSDEEP 12582912:hyNeFhwXdDv4UzMZYsTwHuC9z3B8VyKPsoN2Q/iixSge20LtO3f4:UJziYscHuC1Ko0scL/iNBO3A
- TLSH
  T1254933553C512876EE59B1FE1299434CBA813C136F9311206750B6BCAD3FBDEAAB7380
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation ransomware
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Loads dropped DLL
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  Moho Pro 13/TUTORIAL.txt
- Size 366B
- SHA256 45b5273b51fee943a61619645ec29b4f94d2f8bd896b8101a8a5792fa9fe59e9
- MD5 8c4fa75e373ed95cc5575dc1ab6d2e66
- SHA1 f854db57a8a4894d9ec6c79cf8e36fa397199c76
- SHA512 0cdda5d2fc8835a6647aaf1db37e6ecc436f03d6e080e32e685ef4caec9c8a2e19861aa27796d1389120c52d62a8251dca2605ab13af0f3527fa10f94ad71170
- TLSH
  T149E0D8AF6B030061372159A36612293DB647F01CC0C258FD36ABC2A522E625581AB20F
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8