General

  • Target

    Zorara.zip

  • Size

    16.3MB

  • Sample

    240721-n7wfnszdnd

  • MD5

    cc21d3efc39ce8121609cd144bbbd072

  • SHA1

    5d4923b44f168a09ac82a423539ff983cfd40272

  • SHA256

    1fa3dd58b00adea75d6fe482f3b319558aefb5a3e36ab4426c1608dcc4bc5032

  • SHA512

    4f31effb5c8c00cceff0a2d46a9b7a317ccedd406b4cdb91a092c7c835fdeb097cf8a8b0057824b047b6959af8139bfa049e16eee9985b82488060613db92f8a

  • SSDEEP

    393216:T08Z2M5PHyyJkTvI7eVI//64Dltu43ltoOubYFcHH/:4M5HvkDI7B//dlvmnbYFc/

Malware Config

Targets

    • Target

      ICSharpCode.AvalonEdit.dll

    • Size

      605KB

    • MD5

      d8f0e3940b5bbe9599ee0a84b541d50f

    • SHA1

      850d54860f97c431759933fceb92501df03a9e73

    • SHA256

      202a4719e4b879da67445ab50901d80a259f8680b5d16bc0f929e0a6f6fad199

    • SHA512

      1af4b712a6716abaef56f754cc2e63d27b15f9d2d23285e2491b45e714f34acb3d7b026a2f7b316043253f4b7b9c98dc390ad0a53f2016c486bb695499cdca2a

    • SSDEEP

      6144:wxYTpmHJ01ImQ4JeqcP3Y5hdjxRDSipwypt+9mz+OB4JFDu8n+kUXjWyUO8tKtTD:wKTpmH29/xRxSmzmDuNxHR

    Score
    1/10
    • Target

      Microsoft.Web.WebView2.Core.dll

    • Size

      557KB

    • MD5

      b037ca44fd19b8eedb6d5b9de3e48469

    • SHA1

      1f328389c62cf673b3de97e1869c139d2543494e

    • SHA256

      11e88b2ca921e5c88f64567f11bd83cbc396c10365d40972f3359fcc7965d197

    • SHA512

      fa89ab3347fd57486cf3064ad164574f70e2c2b77c382785479bfd5ab50caa0881de3c2763a0932feac2faaf09479ef699a04ba202866dc7e92640246ba9598b

    • SSDEEP

      12288:6CxswUBor35JrpQ322zy+uFKcDoRFNCMmeA+imQ269pRFZNIEJdIEY0lxEIPrEIE:6Cbmv

    Score
    1/10
    • Target

      Microsoft.Web.WebView2.WinForms.dll

    • Size

      37KB

    • MD5

      c7000faa6c6040188c8cd8ef28b6deda

    • SHA1

      07a23c50092e5c1fd9c9df87e26b65df25d37b24

    • SHA256

      e4f695b72f99024e3ee5d5f26a367e664f4e120bd5d90aa87a8bc0509c365ec8

    • SHA512

      eaee01031477454823974546055965df8d75c5115b25ab07b15ca608a20e8c21154ebb8c707a74213ebad04c2bf34a5f5563306e6da502235372c60672144022

    • SSDEEP

      768:sijOv/1uokD/iyUdcIJtYZDgcEST3p4Jjrjh2jJFSUyauTv1JKia5/Zi/WGQK4uC:jOvZyUjJtYZDgcEST3p4JjrjaJFSUyaf

    Score
    1/10
    • Target

      Microsoft.Web.WebView2.Wpf.dll

    • Size

      50KB

    • MD5

      e107c88a6fc54cc3ceb4d85768374074

    • SHA1

      a8d89ae75880f4fca7d7167fae23ac0d95e3d5f6

    • SHA256

      8f821f0c818f8d817b82f76c25f90fde9fb73ff1ae99c3df3eaf2b955653c9c8

    • SHA512

      b39e07b0c614a0fa88afb1f3b0d9bb9ba9c932e2b30899002008220ccf1acb0f018d5414aee64d92222c2c39f3ffe2c0ad2d9962d23aaa4bf5750c12c7f3e6fe

    • SSDEEP

      1536:fpGqPvHCwKi8GDP/ryEH0GBy4JjrD1alhWU6Ozk1FKKa5/Bi/xGCv0Z0D6TgfPSF:ai8GDP/b0GBy4JjrD1alhWU6Ozk1FKKc

    Score
    1/10
    • Target

      Monaco/fileaccess/index.js

    • Size

      4KB

    • MD5

      e462fb7561f6c9bccb24e62bb93889d2

    • SHA1

      1becca75907b3ae5fb7de82e0cb495ff0fc90517

    • SHA256

      ff3fc42d5f912950d1095c43c8edb8a3be63c8eee9db5ca5d39d5668f68f7b41

    • SHA512

      4e7e83e63195ad0d9d155e3d00e0dc228148c95804d817779a043abe3672087fdc9e038ede8f6510fc88cc283e3d993499cafa8083e5104ccf0360df845acb26

    • SSDEEP

      96:gFEuLu1uHsWwXphsk/9TLsvyOsSnWX+OsM+3qYsMxiT9:4EMej/ZuyEnWv+FK

    Score
    3/10
    • Target

      Monaco/fileaccess/node_modules/.bin/mime

    • Size

      371B

    • MD5

      7ab5bfff58b0a878a4614cddbe424702

    • SHA1

      e75ad406ef2f9fcb1a9bde44ba669f416c824c4f

    • SHA256

      394b93eaaac25f18a20d7cdd80920ecca1fe43c8e5b37501389e644944c6e01f

    • SHA512

      36f59fb7f2a1f985210ce39fb90e6e7998e4ba8030f172496eda22a12c66b58c651211d0f682c2b0ec58a6e1ae19d59380d1fe0c6849f15fcf381df60123aaeb

    Score
    4/10
    • Target

      Monaco/fileaccess/node_modules/.bin/mime.cmd

    • Size

      316B

    • MD5

      2872347ac99221152281bfd56705d437

    • SHA1

      83fa66cd05f64de1ef7f3010344a0f7babe54819

    • SHA256

      cd5ca2f059e780c0a4b1aa9cdd6edc7dc10413d30bf51ad537adbd428e5e7a16

    • SHA512

      3c0b9e12bc1ff8f2bbaa5301d8db78a5c3636dd93f5755728e5b255c4250c0ea9e3c53a545011087b9c2536b1c1676ff01f7eff3015e6e99f2e12c9f15386fe5

    Score
    1/10
    • Target

      Monaco/fileaccess/node_modules/.bin/mime.ps1

    • Size

      769B

    • MD5

      bef04abf08e89532a476c3e474b5f509

    • SHA1

      bb81073d8e07c483ee29121358871535973336e7

    • SHA256

      a43d8b7d57dbbb21f2f98c331970d011177fa1c6be327aa0dbb84c1ad01e9201

    • SHA512

      e20f86c40ce523477da136cb4aa3f29683dee567a31ebfad666666192417f49568e848cb8844e8dcd32d5501fb7176d47aca54c195324e6d41e73093699788b1

    Score
    1/10
    • Target

      Monaco/fileaccess/node_modules/accepts/README.md

    • Size

      4KB

    • MD5

      873e624d40d23cf9b54f9d2f74d2c8d1

    • SHA1

      3a884510d2eeed73a4cd5ae0947a6c72cd3c7426

    • SHA256

      c25a1071e5aa1b1b43e10f083e8d97c3dbf1f7700cfa38b5cbc40725662e1ae0

    • SHA512

      a929edeb59edc6f1ef4f7554ddfd0b1b54aa097d4fdf69c5ec25b14c3c722a034d159daf3ad38508efc775fdf8c246507d53021e4ad79f0708c5df94b311a864

    • SSDEEP

      48:ZdC9AIvI6RZK0nwuBGWxGWwsNdXMoNjP601Wrk0aN8F07DaN89JC7aN8fBfuRhpL:/CnQl0JZ15jue/9IQxokXjwiA0

    Score
    3/10
    • Target

      Monaco/fileaccess/node_modules/accepts/index.js

    • Size

      5KB

    • MD5

      4fe4d2c90a2fd19d6e97443a7d24f815

    • SHA1

      282263f45f6bf80fbf43f4097d53b5b60ff1a05f

    • SHA256

      be2decbd50610e8f995c1e312ee4dd6d7c1244cfdf03ee4c4a3da68e572dada1

    • SHA512

      c795b7285cc92616a46fd1ad2d00ce65fb4b269e6b6fc35315891d119b7c25b7f4573540be0627d577123201d9cfe119c8a53f0e75a8b6ea870f8d89a130c213

    • SSDEEP

      96:oYG1MGmGHqyl8rAyBkmqFxo+uerpDWMlB8fdOGUJTit4UG9bCZhPwA:oYG1Xlqyl88yBD+uerRLD0YQ4rcZh9

    Score
    3/10
    • Target

      Monaco/fileaccess/node_modules/array-flatten/README.md

    • Size

      1KB

    • MD5

      328fdaf1ee65869341567f4fb6716e02

    • SHA1

      98efa9e4bd6d6bca4ebb76991a2187a8a496c8b6

    • SHA256

      071dd896356da12269508f361958ec622e47b27a96d7efdba23b671bc3470416

    • SHA512

      40378eeeb21474e8be2962853b1d279ab8e167e68ebad08ae4e7932c131da317672852916bcc1000ec43a0163653c45158a9a8be819b4a6479163ac8c5391ca5

    Score
    3/10
    • Target

      Monaco/fileaccess/node_modules/array-flatten/array-flatten.js

    • Size

      1KB

    • MD5

      4b17fa06c54846b686b8b799e9dd253a

    • SHA1

      fc6cc30e8b8ec09eeba62bac076ed627aa3ee8d1

    • SHA256

      766ca145b6d25e3d60f352a716e8fa1876bcdf362c0767c360cf24f335bc281e

    • SHA512

      72df1668f464f6942c484155b667086bb6f83f77e826ffcd146ee045079db3334aba270bffb66cdd796d4c9308121ec2a67a404289f19914c45d9a6c15435e71

    Score
    3/10
    • Target

      Monaco/fileaccess/node_modules/body-parser/README.md

    • Size

      17KB

    • MD5

      3152126cd7d54ede5697046e69a7e589

    • SHA1

      3c8820c682cc2e043465d9aafbe1e182571e941f

    • SHA256

      1a8c31593d425887df10e400a765d3f86f3b195b4efdccd44ff4aa542c03380b

    • SHA512

      73b3c1fa28e96f744e7e6a58a13d6c5b31646cf06fe47895c226ed61198c5c2bcd4a2dc0c4447de54ea15d5d56d7e330ad1335b3659598cc576a88e791c16358

    • SSDEEP

      192:eBmKv7ygazeyidkShRvtlgem3x1A6H9wSu9kYPaDpIQVf3X/R0yV2aaX2JC/vuZA:xKFO4d/63TA6H9i9bSDKqvXpqmC

    Score
    3/10
    • Target

      Monaco/fileaccess/node_modules/body-parser/index.js

    • Size

      2KB

    • MD5

      b9e991c0e57c4d5adde68a2f4f063bc7

    • SHA1

      0cb6b9eb7b310c37e5950bbcaf672943657c94b5

    • SHA256

      9c6c900e7e85fb599c62d9b9e4dfd2ea2f61d119dce5ed69ac3a8da828819241

    • SHA512

      3bbd31eed55c32435b01fe7356d39749e95f8f49222115ada841e751ad36227e6f427efdc4e8bad36d8ccd37c2e92c01fa67c24c23f52023df8c1e1be1a3b4f6

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

Score
3/10

behavioral12

antivm
Score
4/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10