General

  • Target

    Zorara.zip

  • Size

    1.4MB

  • MD5

    af47b2e36cb082af969b086e54f453d4

  • SHA1

    7f0f6e935e353c7ca814d6326b17d5014629376e

  • SHA256

    da4caa3d365afb574902b146a685452f81dd0ffda767c1f7d269e9a5c4b68c55

  • SHA512

    961be976e23df43b36fe68775dd667d8ae9596154f64b734ee365754c5dc9d207326b17f05e1af3d3b3f3471474a36f8431c018e37bf48c49beadead7cc74474

  • SSDEEP

    24576:Cx7rrAFfaYC8er6dG4jCyLuV6r5NKq53bcvgbfW/SrZD6wB+/2MoblC0y003YqnL:CxjAEDVr6U4ja6r5sG3bggaW69/AS0kD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Zorara.zip
    .zip
  • ICSharpCode.AvalonEdit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • TidalAPI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/CeleryIn.bin
    .dll windows:6 windows x64 arch:x64

    fe78118d64d767d704fee2343d26ea59


    Headers

    Imports

    Exports

    Sections

  • bin/CeleryInjector.exe
    .exe windows:6 windows x64 arch:x64

    2815423b12fff7c32f137d69c0403656


    Headers

    Imports

    Sections

  • bin/ver.txt
  • syntax/lua.xshd
    .xml
  • zorara.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections