General

  • Target

    zorara.zip

  • Size

    1.5MB

  • MD5

    8978faf8a24a66ad572b9e46693a87fd

  • SHA1

    896395cb9f6e59dec4e3552f73f5115c818cfca5

  • SHA256

    119b6d40ff3fa76cd0a45607aee292ec4c85f76601a1ee0e81661ad24b9e1967

  • SHA512

    8072029436c16cc6d4ffedf4d94ab672d81d81a9a33c0a15ac56dc53f03f054f761502edc912e53ed7543ae38ca60fbafd0c3dc4ab1ba687fe313a814ee537fc

  • SSDEEP

    49152:CxjAEDVr6U4ja6r5sG3bggaW6F/ApUM2PX9zQkN:ClVDt6la6r59rg7F/Kz2FzdN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • zorara.zip
    .zip
  • CeleryAPI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ICSharpCode.AvalonEdit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ICSharpCode.AvalonEdit.xml
    .xml
  • TidalAPI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/CeleryIn.bin
    .dll windows:6 windows x64 arch:x64

    fe78118d64d767d704fee2343d26ea59


    Headers

    Imports

    Exports

    Sections

  • bin/CeleryInjector.exe
    .exe windows:6 windows x64 arch:x64

    2815423b12fff7c32f137d69c0403656


    Headers

    Imports

    Sections

  • bin/ver.txt
  • syntax/lua.xshd
    .xml
  • zorara.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • zorara.exe.config
    .xml
  • zorara.pdb