General

  • Target

    zorara.zip

  • Size

    1.4MB

  • MD5

    1b87e0fdfd6e57897fd9dbc1af3443d4

  • SHA1

    8da23da2b63227c313761be06772ad3ccfbb5b3d

  • SHA256

    46af44289f2c83c5acb7a2bd97fc55967922eea3066162a5d6a7d560c82b906f

  • SHA512

    d4627bebbb8f5ec41892077830468240f7b3ca2715d7df1b802ed3b07f63adfe07f723c279bb7d5053bdb959a466f3be2e58fd67b3bdba7f8e275c35aa981b01

  • SSDEEP

    24576:Cx7rrAFfaYC8er6dG4jCyLuV6r5NKq53bcvgbfW/SrZD64B+/2MoblC0nrV3+6nK:CxjAEDVr6U4ja6r5sG3bggaW6F/AHrJW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • zorara.zip
    .zip
  • CeleryAPI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ICSharpCode.AvalonEdit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/CeleryIn.bin
    .dll windows:6 windows x64 arch:x64

    fe78118d64d767d704fee2343d26ea59


    Headers

    Imports

    Exports

    Sections

  • bin/CeleryInjector.exe
    .exe windows:6 windows x64 arch:x64

    2815423b12fff7c32f137d69c0403656


    Headers

    Imports

    Sections

  • bin/ver.txt
  • syntax/lua.xshd
    .xml
  • zorara.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections