Overview
overview
5Static
static
5Moho Pro 1...04.rar
windows10-2004-x64
1Moho Pro 1...04.rar
windows11-ltsc_2024-x64
1AppDoze.com.txt
windows10-2004-x64
1AppDoze.com.txt
windows11-ltsc_2024-x64
1Crack/Inst...ns.txt
windows10-2004-x64
1Crack/Inst...ns.txt
windows11-ltsc_2024-x64
1Crack/Moho.exe
windows10-2004-x64
1Crack/Moho.exe
windows11-ltsc_2024-x64
1How to Install.txt
windows10-2004-x64
1How to Install.txt
windows11-ltsc_2024-x64
1Setup/Moho.exe
windows10-2004-x64
5Setup/Moho.exe
windows11-ltsc_2024-x64
4Analysis
- max time kernel
149s - max time network
167s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
26/08/2026, 19:33
Behavioral task
behavioral1
Sample
Moho Pro 14.2 Build 20240604.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Moho Pro 14.2 Build 20240604.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
AppDoze.com.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
AppDoze.com.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Crack/Instructions.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Crack/Instructions.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Crack/Moho.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Crack/Moho.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
How to Install.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
How to Install.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Setup/Moho.exe
Resource
win10v2004-20260513-en
General
- Target AppDoze.com.txt
- Size 40B
- Sample260826-x9v3cssvav
- SHA256 d37944546ed95b51f515d7f81702f0c2d2143acfdf67c4250262f8d19a4121b7
- MD5 deccc014540f132dd532691b490cebbc
- SHA1 52b471405aa35beef562f947fc7df969111e67f8
- SHA512 26c9bd19fcce804ba61c110f57a598baa183ff6af7e83b507c94a25451d1b150edcb4fc0f744869a900a5678e2d2d394e2ddcef46c05210eb753720d3f2e6f75
- MD5 SHA1 SHA512
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2744 NOTEPAD.EXE