General
- Target mohafile.js
- Size 1.2MB
- Sample260716-htm99aax3x
- SHA256 51379f4acb028f106dff9e97d2fffe91ef2ed5eb377dfdafbe87b14d4f64044e
- MD5 37cd3b88d603cf06ac5d3f0bb60bc2aa
- SHA1 85a9f1bcbfdc1a05c49550b447675044c5bbfc0e
- SHA512 174cbb2846c7cdae407784313bc4caf3b15a78bcd0671b9b10c18f5595fe3f3d8cb4598d2cea4b183d9237579e8a49795ddf82704edb986c4ea5248ac4a62979
- SSDEEP 24576:+IOjh6Kz6O3FIMi6IPqbUTX1W/tjwvClgRBn9CF9C7DhBy60K1:+x9xi3qog/oC+tCWm6f
- TLSH T1E9459E6A0B6C401ADEC9A12B264D65C3F8B1AF01F170B450E7B849B5F6CDF8930796E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
mohafile.js
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
mohafile.js
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target mohafile.js
- Size 1.2MB
- SHA256 51379f4acb028f106dff9e97d2fffe91ef2ed5eb377dfdafbe87b14d4f64044e
- MD5 37cd3b88d603cf06ac5d3f0bb60bc2aa
- SHA1 85a9f1bcbfdc1a05c49550b447675044c5bbfc0e
- SHA512 174cbb2846c7cdae407784313bc4caf3b15a78bcd0671b9b10c18f5595fe3f3d8cb4598d2cea4b183d9237579e8a49795ddf82704edb986c4ea5248ac4a62979
- SSDEEP 24576:+IOjh6Kz6O3FIMi6IPqbUTX1W/tjwvClgRBn9CF9C7DhBy60K1:+x9xi3qog/oC+tCWm6f
- TLSH T1E9459E6A0B6C401ADEC9A12B264D65C3F8B1AF01F170B450E7B849B5F6CDF8930796E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Suspicious use of SetThreadContext