Overview
overview
4Static
static
3ICSharpCod...it.dll
windows7-x64
1ICSharpCod...it.dll
windows10-2004-x64
1Microsoft....re.dll
windows7-x64
1Microsoft....re.dll
windows10-2004-x64
1Microsoft....ms.dll
windows7-x64
1Microsoft....ms.dll
windows10-2004-x64
1Microsoft....pf.dll
windows7-x64
1Microsoft....pf.dll
windows10-2004-x64
1Monaco/fil...dex.js
windows7-x64
3Monaco/fil...dex.js
windows10-2004-x64
3Monaco/fil...n/mime
ubuntu-18.04-amd64
3Monaco/fil...n/mime
debian-9-armhf
4Monaco/fil...n/mime
debian-9-mips
3Monaco/fil...n/mime
debian-9-mipsel
3Monaco/fil...me.cmd
windows7-x64
1Monaco/fil...me.cmd
windows10-2004-x64
1Monaco/fil...me.ps1
ubuntu-18.04-amd64
1Monaco/fil...me.ps1
debian-9-armhf
1Monaco/fil...me.ps1
debian-9-mips
1Monaco/fil...me.ps1
debian-9-mipsel
1Monaco/fil...DME.js
windows7-x64
3Monaco/fil...DME.js
windows10-2004-x64
3Monaco/fil...dex.js
windows7-x64
3Monaco/fil...dex.js
windows10-2004-x64
3Monaco/fil...DME.js
windows7-x64
3Monaco/fil...DME.js
windows10-2004-x64
3Monaco/fil...ten.js
windows7-x64
3Monaco/fil...ten.js
windows10-2004-x64
3Monaco/fil...DME.js
windows7-x64
3Monaco/fil...DME.js
windows10-2004-x64
3Monaco/fil...dex.js
windows7-x64
3Monaco/fil...dex.js
windows10-2004-x64
3General
-
Target
Zorara.zip
-
Size
16.3MB
-
Sample
240721-n7wfnszdnd
-
MD5
cc21d3efc39ce8121609cd144bbbd072
-
SHA1
5d4923b44f168a09ac82a423539ff983cfd40272
-
SHA256
1fa3dd58b00adea75d6fe482f3b319558aefb5a3e36ab4426c1608dcc4bc5032
-
SHA512
4f31effb5c8c00cceff0a2d46a9b7a317ccedd406b4cdb91a092c7c835fdeb097cf8a8b0057824b047b6959af8139bfa049e16eee9985b82488060613db92f8a
-
SSDEEP
393216:T08Z2M5PHyyJkTvI7eVI//64Dltu43ltoOubYFcHH/:4M5HvkDI7B//dlvmnbYFc/
Static task
static1
Behavioral task
behavioral1
Sample
ICSharpCode.AvalonEdit.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ICSharpCode.AvalonEdit.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
Monaco/fileaccess/index.js
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Monaco/fileaccess/index.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
Monaco/fileaccess/node_modules/.bin/mime
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral12
Sample
Monaco/fileaccess/node_modules/.bin/mime
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral13
Sample
Monaco/fileaccess/node_modules/.bin/mime
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral14
Sample
Monaco/fileaccess/node_modules/.bin/mime
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral15
Sample
Monaco/fileaccess/node_modules/.bin/mime.cmd
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
Monaco/fileaccess/node_modules/.bin/mime.cmd
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
Monaco/fileaccess/node_modules/.bin/mime.ps1
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral18
Sample
Monaco/fileaccess/node_modules/.bin/mime.ps1
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral19
Sample
Monaco/fileaccess/node_modules/.bin/mime.ps1
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral20
Sample
Monaco/fileaccess/node_modules/.bin/mime.ps1
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral21
Sample
Monaco/fileaccess/node_modules/accepts/README.js
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Monaco/fileaccess/node_modules/accepts/README.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
Monaco/fileaccess/node_modules/accepts/index.js
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Monaco/fileaccess/node_modules/accepts/index.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
Monaco/fileaccess/node_modules/array-flatten/README.js
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
Monaco/fileaccess/node_modules/array-flatten/README.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
Monaco/fileaccess/node_modules/array-flatten/array-flatten.js
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
Monaco/fileaccess/node_modules/array-flatten/array-flatten.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
Monaco/fileaccess/node_modules/body-parser/README.js
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Monaco/fileaccess/node_modules/body-parser/README.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
Monaco/fileaccess/node_modules/body-parser/index.js
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Monaco/fileaccess/node_modules/body-parser/index.js
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
ICSharpCode.AvalonEdit.dll
-
Size
605KB
-
MD5
d8f0e3940b5bbe9599ee0a84b541d50f
-
SHA1
850d54860f97c431759933fceb92501df03a9e73
-
SHA256
202a4719e4b879da67445ab50901d80a259f8680b5d16bc0f929e0a6f6fad199
-
SHA512
1af4b712a6716abaef56f754cc2e63d27b15f9d2d23285e2491b45e714f34acb3d7b026a2f7b316043253f4b7b9c98dc390ad0a53f2016c486bb695499cdca2a
-
SSDEEP
6144:wxYTpmHJ01ImQ4JeqcP3Y5hdjxRDSipwypt+9mz+OB4JFDu8n+kUXjWyUO8tKtTD:wKTpmH29/xRxSmzmDuNxHR
Score1/10 -
-
-
Target
Microsoft.Web.WebView2.Core.dll
-
Size
557KB
-
MD5
b037ca44fd19b8eedb6d5b9de3e48469
-
SHA1
1f328389c62cf673b3de97e1869c139d2543494e
-
SHA256
11e88b2ca921e5c88f64567f11bd83cbc396c10365d40972f3359fcc7965d197
-
SHA512
fa89ab3347fd57486cf3064ad164574f70e2c2b77c382785479bfd5ab50caa0881de3c2763a0932feac2faaf09479ef699a04ba202866dc7e92640246ba9598b
-
SSDEEP
12288:6CxswUBor35JrpQ322zy+uFKcDoRFNCMmeA+imQ269pRFZNIEJdIEY0lxEIPrEIE:6Cbmv
Score1/10 -
-
-
Target
Microsoft.Web.WebView2.WinForms.dll
-
Size
37KB
-
MD5
c7000faa6c6040188c8cd8ef28b6deda
-
SHA1
07a23c50092e5c1fd9c9df87e26b65df25d37b24
-
SHA256
e4f695b72f99024e3ee5d5f26a367e664f4e120bd5d90aa87a8bc0509c365ec8
-
SHA512
eaee01031477454823974546055965df8d75c5115b25ab07b15ca608a20e8c21154ebb8c707a74213ebad04c2bf34a5f5563306e6da502235372c60672144022
-
SSDEEP
768:sijOv/1uokD/iyUdcIJtYZDgcEST3p4Jjrjh2jJFSUyauTv1JKia5/Zi/WGQK4uC:jOvZyUjJtYZDgcEST3p4JjrjaJFSUyaf
Score1/10 -
-
-
Target
Microsoft.Web.WebView2.Wpf.dll
-
Size
50KB
-
MD5
e107c88a6fc54cc3ceb4d85768374074
-
SHA1
a8d89ae75880f4fca7d7167fae23ac0d95e3d5f6
-
SHA256
8f821f0c818f8d817b82f76c25f90fde9fb73ff1ae99c3df3eaf2b955653c9c8
-
SHA512
b39e07b0c614a0fa88afb1f3b0d9bb9ba9c932e2b30899002008220ccf1acb0f018d5414aee64d92222c2c39f3ffe2c0ad2d9962d23aaa4bf5750c12c7f3e6fe
-
SSDEEP
1536:fpGqPvHCwKi8GDP/ryEH0GBy4JjrD1alhWU6Ozk1FKKa5/Bi/xGCv0Z0D6TgfPSF:ai8GDP/b0GBy4JjrD1alhWU6Ozk1FKKc
Score1/10 -
-
-
Target
Monaco/fileaccess/index.js
-
Size
4KB
-
MD5
e462fb7561f6c9bccb24e62bb93889d2
-
SHA1
1becca75907b3ae5fb7de82e0cb495ff0fc90517
-
SHA256
ff3fc42d5f912950d1095c43c8edb8a3be63c8eee9db5ca5d39d5668f68f7b41
-
SHA512
4e7e83e63195ad0d9d155e3d00e0dc228148c95804d817779a043abe3672087fdc9e038ede8f6510fc88cc283e3d993499cafa8083e5104ccf0360df845acb26
-
SSDEEP
96:gFEuLu1uHsWwXphsk/9TLsvyOsSnWX+OsM+3qYsMxiT9:4EMej/ZuyEnWv+FK
Score3/10 -
-
-
Target
Monaco/fileaccess/node_modules/.bin/mime
-
Size
371B
-
MD5
7ab5bfff58b0a878a4614cddbe424702
-
SHA1
e75ad406ef2f9fcb1a9bde44ba669f416c824c4f
-
SHA256
394b93eaaac25f18a20d7cdd80920ecca1fe43c8e5b37501389e644944c6e01f
-
SHA512
36f59fb7f2a1f985210ce39fb90e6e7998e4ba8030f172496eda22a12c66b58c651211d0f682c2b0ec58a6e1ae19d59380d1fe0c6849f15fcf381df60123aaeb
Score4/10 -
-
-
Target
Monaco/fileaccess/node_modules/.bin/mime.cmd
-
Size
316B
-
MD5
2872347ac99221152281bfd56705d437
-
SHA1
83fa66cd05f64de1ef7f3010344a0f7babe54819
-
SHA256
cd5ca2f059e780c0a4b1aa9cdd6edc7dc10413d30bf51ad537adbd428e5e7a16
-
SHA512
3c0b9e12bc1ff8f2bbaa5301d8db78a5c3636dd93f5755728e5b255c4250c0ea9e3c53a545011087b9c2536b1c1676ff01f7eff3015e6e99f2e12c9f15386fe5
Score1/10 -
-
-
Target
Monaco/fileaccess/node_modules/.bin/mime.ps1
-
Size
769B
-
MD5
bef04abf08e89532a476c3e474b5f509
-
SHA1
bb81073d8e07c483ee29121358871535973336e7
-
SHA256
a43d8b7d57dbbb21f2f98c331970d011177fa1c6be327aa0dbb84c1ad01e9201
-
SHA512
e20f86c40ce523477da136cb4aa3f29683dee567a31ebfad666666192417f49568e848cb8844e8dcd32d5501fb7176d47aca54c195324e6d41e73093699788b1
Score1/10 -
-
-
Target
Monaco/fileaccess/node_modules/accepts/README.md
-
Size
4KB
-
MD5
873e624d40d23cf9b54f9d2f74d2c8d1
-
SHA1
3a884510d2eeed73a4cd5ae0947a6c72cd3c7426
-
SHA256
c25a1071e5aa1b1b43e10f083e8d97c3dbf1f7700cfa38b5cbc40725662e1ae0
-
SHA512
a929edeb59edc6f1ef4f7554ddfd0b1b54aa097d4fdf69c5ec25b14c3c722a034d159daf3ad38508efc775fdf8c246507d53021e4ad79f0708c5df94b311a864
-
SSDEEP
48:ZdC9AIvI6RZK0nwuBGWxGWwsNdXMoNjP601Wrk0aN8F07DaN89JC7aN8fBfuRhpL:/CnQl0JZ15jue/9IQxokXjwiA0
Score3/10 -
-
-
Target
Monaco/fileaccess/node_modules/accepts/index.js
-
Size
5KB
-
MD5
4fe4d2c90a2fd19d6e97443a7d24f815
-
SHA1
282263f45f6bf80fbf43f4097d53b5b60ff1a05f
-
SHA256
be2decbd50610e8f995c1e312ee4dd6d7c1244cfdf03ee4c4a3da68e572dada1
-
SHA512
c795b7285cc92616a46fd1ad2d00ce65fb4b269e6b6fc35315891d119b7c25b7f4573540be0627d577123201d9cfe119c8a53f0e75a8b6ea870f8d89a130c213
-
SSDEEP
96:oYG1MGmGHqyl8rAyBkmqFxo+uerpDWMlB8fdOGUJTit4UG9bCZhPwA:oYG1Xlqyl88yBD+uerRLD0YQ4rcZh9
Score3/10 -
-
-
Target
Monaco/fileaccess/node_modules/array-flatten/README.md
-
Size
1KB
-
MD5
328fdaf1ee65869341567f4fb6716e02
-
SHA1
98efa9e4bd6d6bca4ebb76991a2187a8a496c8b6
-
SHA256
071dd896356da12269508f361958ec622e47b27a96d7efdba23b671bc3470416
-
SHA512
40378eeeb21474e8be2962853b1d279ab8e167e68ebad08ae4e7932c131da317672852916bcc1000ec43a0163653c45158a9a8be819b4a6479163ac8c5391ca5
Score3/10 -
-
-
Target
Monaco/fileaccess/node_modules/array-flatten/array-flatten.js
-
Size
1KB
-
MD5
4b17fa06c54846b686b8b799e9dd253a
-
SHA1
fc6cc30e8b8ec09eeba62bac076ed627aa3ee8d1
-
SHA256
766ca145b6d25e3d60f352a716e8fa1876bcdf362c0767c360cf24f335bc281e
-
SHA512
72df1668f464f6942c484155b667086bb6f83f77e826ffcd146ee045079db3334aba270bffb66cdd796d4c9308121ec2a67a404289f19914c45d9a6c15435e71
Score3/10 -
-
-
Target
Monaco/fileaccess/node_modules/body-parser/README.md
-
Size
17KB
-
MD5
3152126cd7d54ede5697046e69a7e589
-
SHA1
3c8820c682cc2e043465d9aafbe1e182571e941f
-
SHA256
1a8c31593d425887df10e400a765d3f86f3b195b4efdccd44ff4aa542c03380b
-
SHA512
73b3c1fa28e96f744e7e6a58a13d6c5b31646cf06fe47895c226ed61198c5c2bcd4a2dc0c4447de54ea15d5d56d7e330ad1335b3659598cc576a88e791c16358
-
SSDEEP
192:eBmKv7ygazeyidkShRvtlgem3x1A6H9wSu9kYPaDpIQVf3X/R0yV2aaX2JC/vuZA:xKFO4d/63TA6H9i9bSDKqvXpqmC
Score3/10 -
-
-
Target
Monaco/fileaccess/node_modules/body-parser/index.js
-
Size
2KB
-
MD5
b9e991c0e57c4d5adde68a2f4f063bc7
-
SHA1
0cb6b9eb7b310c37e5950bbcaf672943657c94b5
-
SHA256
9c6c900e7e85fb599c62d9b9e4dfd2ea2f61d119dce5ed69ac3a8da828819241
-
SHA512
3bbd31eed55c32435b01fe7356d39749e95f8f49222115ada841e751ad36227e6f427efdc4e8bad36d8ccd37c2e92c01fa67c24c23f52023df8c1e1be1a3b4f6
Score3/10 -