9fe3f7d95096f66d91135d5ba9353b91daed3e77054a9da251c57788c9bb84f9

Sharing

Copy URL Twitter E-mail

General

Target
Moho Pro 14.2 Build 20240604.rar
Size 495.7MB
Sample260826-x9v3cssvav
SHA256 9fe3f7d95096f66d91135d5ba9353b91daed3e77054a9da251c57788c9bb84f9
MD5 9ca216b0161e233096f0e300e1c3806c
SHA1 fc3aa0e00f4f2476b80e835dd7c21d9f4028333f
SHA512 8bfa9c1dae0cd3e0c7096211a95f7477b706ed1bf944f846c45c0970ea889472d85517c041eeecf1e760032a9868ae87df5f070db86ada31d9c716cb800d47d1
SSDEEP 12582912:GFBaLtn8ebS9zQUOzORrPXOn6ZWG9tTPwn73m2ee2lpMwSG:GFBItn3SOUOc7O6p9ZPKma25SG
TLSH
T13F4933F18C05E082F6460F73D41AFB919EB1A04B434DC5E5F9D56ECE8967282CF6B06A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  Moho Pro 14.2 Build 20240604.rar
- Size 495.7MB
- SHA256 9fe3f7d95096f66d91135d5ba9353b91daed3e77054a9da251c57788c9bb84f9
- MD5 9ca216b0161e233096f0e300e1c3806c
- SHA1 fc3aa0e00f4f2476b80e835dd7c21d9f4028333f
- SHA512 8bfa9c1dae0cd3e0c7096211a95f7477b706ed1bf944f846c45c0970ea889472d85517c041eeecf1e760032a9868ae87df5f070db86ada31d9c716cb800d47d1
- SSDEEP 12582912:GFBaLtn8ebS9zQUOzORrPXOn6ZWG9tTPwn73m2ee2lpMwSG:GFBItn3SOUOc7O6p9ZPKma25SG
- TLSH
  T13F4933F18C05E082F6460F73D41AFB919EB1A04B434DC5E5F9D56ECE8967282CF6B06A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  AppDoze.com.txt
- Size 40B
- SHA256 d37944546ed95b51f515d7f81702f0c2d2143acfdf67c4250262f8d19a4121b7
- MD5 deccc014540f132dd532691b490cebbc
- SHA1 52b471405aa35beef562f947fc7df969111e67f8
- SHA512 26c9bd19fcce804ba61c110f57a598baa183ff6af7e83b507c94a25451d1b150edcb4fc0f744869a900a5678e2d2d394e2ddcef46c05210eb753720d3f2e6f75
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  Crack/Instructions.txt
- Size 336B
- SHA256 d3b5b4544bf4fec3c6a31c47be988a469123ee649547a605612bf833a3daa48a
- MD5 2699c9930fc718b89c6d3a2408305cdf
- SHA1 1f03b3d4a1b998b60ae04bb267ca5827398d0ce9
- SHA512 dc3b416d7c237e29c4a5939f7a2fb828e418ddc2e9e155ea4e8d85976cceb25ffbc6007e896ede1dbf2c333faaea8cb3c6158f2b449a12b1a95ce99036db258a
- TLSH
  T1BDE020964A16959746F205E5B71A3434A760911D637C512321EE110C70D41FC63A904D
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral5 behavioral6
- Target
  Crack/Moho.exe
- Size 13.9MB
- SHA256 4d4b4ed9192ffd876e1e13ead6fe0e67bde77185f7838f29fdfb424ce4506ef5
- MD5 1109c6169b5943502755f333271fb8d7
- SHA1 5936d96fb32435f6d02d24663d6df3f2593d727c
- SHA512 a5de0c4285520195d7e069e407694fdecf8819fe46d3f74dd77f48f7d51407da263411bfbc8dca0a9cbba7f1719368a4f342fbb580c5fd39007a11750e355ee6
- SSDEEP 196608:zA5TXS5VynhCF1RaG07RNbearYtf437QbWhD:8dhCF/6eaj7T
- TLSH
  T1EFE68C8232D168D8D1BBF17D826BA903E7B37C0957344AE711D8B66E1F27DE10D3A621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  How to Install.txt
- Size 613B
- SHA256 6c3fe8ffbe2e44fa6ae6494901fd490848559804fe66300594c7b93c7788e811
- MD5 835ed62ec247bff6a3272963de3670be
- SHA1 de8738d89d66df00dbbb63b34db43a77166ce984
- SHA512 e5750c6f11db4de31cf645d17919a05efad3a1b88f7f97f79c36a208b4cde24b307e30cf00ca4447e23589d273116e44862d8da012945f102f16012d69a17c90
- TLSH
  T1E8F08BCF1F8353E3277766EB829DA8D0A13BE00D5AA2265B005AC14C2224B6CC3C30C5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Setup/Moho.exe
- Size 491.0MB
- SHA256 ae34c051b58980898b246b21a3bd1412d4c1f42aba2e5a53d2b9586b9c2cb15e
- MD5 7036911e08ade1b5b08f90f6192506f7
- SHA1 07cfd53afd4f2246e6d22228f37485a7ede3871d
- SHA512 c754b2e217d03a4c458caa650034667af5705bda90f8a619480306bbdb2320c14984308d6e55aaebfceba7cba32afa22cd43d0fd95f5dc7023f87e973d51be2d
- SSDEEP 12582912:5Qn9tIIFzlKLO4e/1xhNarWjDACGiNhPAPmU77z6e:yn9GIFpKLO1NxSrEDhGinPsmU73
- TLSH
  T1463933D81655A83FC85FC73109D3A2A09E7BE406F618EE5B27EC918E4F621311D6F8B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery installer persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Event Triggered Execution: Component Object Model Hijacking

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12