General

  • Target

    zorara.zip

  • Size

    1.4MB

  • MD5

    c5dfffa5565c03b9d20e905e6fe16177

  • SHA1

    9ef3e55adc70bea6bc69c441eeb4b75921ef78f2

  • SHA256

    1d1154e06ba68ede685d0955c74e17ab4f2330764ba872f04cd2817efca7013d

  • SHA512

    80d4971d13d4aea57ef52f3112a4aed0928248554098a5b03506c150cb735e9acd81739699174340ae96cde8bc544c0e3f337dd1d60c71d3344e6797206a676f

  • SSDEEP

    24576:Cx7rrAFfaYC8er6dG4jCyLuV6r5NKq53bcvgbfW/SrZD64B+/2MoblC01jCbKDdo:CxjAEDVr6U4ja6r5sG3bggaW6F/A+KJo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • zorara.zip
    .zip
  • CeleryAPI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ICSharpCode.AvalonEdit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/CeleryIn.bin
    .dll windows:6 windows x64 arch:x64

    fe78118d64d767d704fee2343d26ea59


    Headers

    Imports

    Exports

    Sections

  • bin/CeleryInjector.exe
    .exe windows:6 windows x64 arch:x64

    2815423b12fff7c32f137d69c0403656


    Headers

    Imports

    Sections

  • bin/ver.txt
  • syntax/lua.xshd
    .xml
  • zorara.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections