Analysis
-
max time kernel
92s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04-09-2024 21:41
General
-
Target
ZoraraUI.exe
-
Size
254KB
-
MD5
6acb5bdb3506ad12c59cf8a33bb86a0c
-
SHA1
7dbc8c9165bf01f3a2263028bd7b574e0093ae80
-
SHA256
b2394ca66b06a31f8b53291df1d87677f89c5efbfc13307e1019d1d2f16857c1
-
SHA512
94dbcdb8f0bfdc7ff2b3e1c160be12288392c00fb21263534c60dc7b291a40239974613cb1e8ca11581bfe5d9f23bcf45d4810dada13647597769c26bfe65266
-
SSDEEP
3072:WjK4UGDHXrQ8hy7qgpHulWD9ZvZ5Pf3Ca10xuZ04ntfOBhBuSmYwSKgIwM:WjK4TDUqgpqWDLZ5H+xuZ04ihASN
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 19 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ZoraraUI.exe"C:\Users\Admin\AppData\Local\Temp\ZoraraUI.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.9MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
21.6MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
21.6MB
-
Filesize
8KB
-
Filesize
7.9MB
-
Filesize
21.6MB