General
- Target Moho.exe
- Size 491.2MB
- Sample260825-pgfg7shr3y
- SHA256 0b1c14e7d86e17e89a6311cb5485a2d52794d3ff2a77d095112e5f40b5cd3a6d
- MD5 9fe9291f77ce722e31c687dc5c18fcc1
- SHA1 798ae0984498b99bd098683d0d1a429a89f38a39
- SHA512 5f4c9ba1ab3096c6b481551ee61e4864c7669a05c48ac92822e46a421e267963f6098bf1a4186e2008b146779b6ee99712cf91a1e05b708e69c836c03fce9e6e
- SSDEEP 12582912:sWE7rLDi/cO2S1UjQvf3cPbm62xE+8IGjHQwJ3gX3:sWurC//J1UjQvfe2xEyd
- TLSH T11B393323209B253EDCD805375A375724A737B3022D1E8D1647E28D9EEBB86402F76B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Moho.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Moho.exe
- Size 491.2MB
- SHA256 0b1c14e7d86e17e89a6311cb5485a2d52794d3ff2a77d095112e5f40b5cd3a6d
- MD5 9fe9291f77ce722e31c687dc5c18fcc1
- SHA1 798ae0984498b99bd098683d0d1a429a89f38a39
- SHA512 5f4c9ba1ab3096c6b481551ee61e4864c7669a05c48ac92822e46a421e267963f6098bf1a4186e2008b146779b6ee99712cf91a1e05b708e69c836c03fce9e6e
- SSDEEP 12582912:sWE7rLDi/cO2S1UjQvf3cPbm62xE+8IGjHQwJ3gX3:sWurC//J1UjQvfe2xEyd
- TLSH T11B393323209B253EDCD805375A375724A737B3022D1E8D1647E28D9EEBB86402F76B67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.