Overview
overview
5Static
static
5Moho Pro 1...04.rar
windows10-2004-x64
1Moho Pro 1...04.rar
windows11-ltsc_2024-x64
1AppDoze.com.txt
windows10-2004-x64
1AppDoze.com.txt
windows11-ltsc_2024-x64
1Crack/Inst...ns.txt
windows10-2004-x64
1Crack/Inst...ns.txt
windows11-ltsc_2024-x64
1Crack/Moho.exe
windows10-2004-x64
1Crack/Moho.exe
windows11-ltsc_2024-x64
1How to Install.txt
windows10-2004-x64
1How to Install.txt
windows11-ltsc_2024-x64
1Setup/Moho.exe
windows10-2004-x64
5Setup/Moho.exe
windows11-ltsc_2024-x64
4Analysis
- max time kernel
148s - max time network
171s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
26/08/2026, 19:33
Behavioral task
behavioral1
Sample
Moho Pro 14.2 Build 20240604.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Moho Pro 14.2 Build 20240604.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
AppDoze.com.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
AppDoze.com.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Crack/Instructions.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Crack/Instructions.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Crack/Moho.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Crack/Moho.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
How to Install.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
How to Install.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Setup/Moho.exe
Resource
win10v2004-20260513-en
General
- Target Moho Pro 14.2 Build 20240604.rar
- Size 495.7MB
- Sample260826-x9v3cssvav
- SHA256 9fe3f7d95096f66d91135d5ba9353b91daed3e77054a9da251c57788c9bb84f9
- MD5 9ca216b0161e233096f0e300e1c3806c
- SHA1 fc3aa0e00f4f2476b80e835dd7c21d9f4028333f
- SHA512 8bfa9c1dae0cd3e0c7096211a95f7477b706ed1bf944f846c45c0970ea889472d85517c041eeecf1e760032a9868ae87df5f070db86ada31d9c716cb800d47d1
- SSDEEP 12582912:GFBaLtn8ebS9zQUOzORrPXOn6ZWG9tTPwn73m2ee2lpMwSG:GFBItn3SOUOc7O6p9ZPKma25SG
- TLSH T13F4933F18C05E082F6460F73D41AFB919EB1A04B434DC5E5F9D56ECE8967282CF6B06A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1212 7zFM.exe Token: 35 1212 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1212 7zFM.exe