Overview
overview
5Static
static
3Microsoft....re.dll
windows7-x64
1Microsoft....re.dll
windows10-2004-x64
1Microsoft....ms.dll
windows7-x64
1Microsoft....ms.dll
windows10-2004-x64
1Microsoft....pf.dll
windows7-x64
1Microsoft....pf.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Zorara.dll
windows7-x64
5Zorara.dll
windows10-2004-x64
5ZoraraUI.exe
windows7-x64
1ZoraraUI.exe
windows10-2004-x64
1ZoraraUI.exe
windows7-x64
1ZoraraUI.exe
windows10-2004-x64
5ZoraraUI.e...re.dll
windows7-x64
1ZoraraUI.e...re.dll
windows10-2004-x64
1ZoraraUI.e...pet.js
windows7-x64
3ZoraraUI.e...pet.js
windows10-2004-x64
3bin/Monaco/index.html
windows7-x64
3bin/Monaco/index.html
windows10-2004-x64
5bin/Monaco...ain.js
windows7-x64
3bin/Monaco...ain.js
windows10-2004-x64
3bin/Monaco...bat.js
windows7-x64
3bin/Monaco...bat.js
windows10-2004-x64
3bin/Monaco...fee.js
windows7-x64
3bin/Monaco...fee.js
windows10-2004-x64
3bin/Monaco...cpp.js
windows7-x64
3bin/Monaco...cpp.js
windows10-2004-x64
3bin/Monaco...arp.js
windows7-x64
3bin/Monaco...arp.js
windows10-2004-x64
3bin/Monaco...csp.js
windows7-x64
3bin/Monaco...csp.js
windows10-2004-x64
3Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
04-09-2024 21:41
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral2
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral4
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral6
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Newtonsoft.Json.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral8
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Zorara.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral10
Sample
Zorara.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
ZoraraUI.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral12
Sample
ZoraraUI.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
ZoraraUI.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral14
Sample
ZoraraUI.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
ZoraraUI.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral16
Sample
ZoraraUI.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
ZoraraUI.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.54/adblock_snippet.js
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral18
Sample
ZoraraUI.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.54/adblock_snippet.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
bin/Monaco/index.html
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral20
Sample
bin/Monaco/index.html
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
bin/Monaco/vs/base/worker/workerMain.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral22
Sample
bin/Monaco/vs/base/worker/workerMain.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
bin/Monaco/vs/basic-languages/bat/bat.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral24
Sample
bin/Monaco/vs/basic-languages/bat/bat.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
bin/Monaco/vs/basic-languages/coffee/coffee.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral26
Sample
bin/Monaco/vs/basic-languages/coffee/coffee.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
bin/Monaco/vs/basic-languages/cpp/cpp.js
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral28
Sample
bin/Monaco/vs/basic-languages/cpp/cpp.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
bin/Monaco/vs/basic-languages/csharp/csharp.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral30
Sample
bin/Monaco/vs/basic-languages/csharp/csharp.js
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
bin/Monaco/vs/basic-languages/csp/csp.js
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral32
Sample
bin/Monaco/vs/basic-languages/csp/csp.js
Resource
win10v2004-20240802-en
windows10-2004-x64
General
-
Target
Zorara.dll
-
Size
12.9MB
-
MD5
fa13fecdb5c644e939209ecb1b09841e
-
SHA1
5d187479c109423fffa61c5e5cb10bc7916294b2
-
SHA256
feef100d5a021fdfb39c164029719944350bcb9c0b1fb37a82727ea4feb3d3aa
-
SHA512
ba9d1fec7e889b9248ea5c47d843f451f949671b62630cf5066d0cab5e208288ffe8c812c6bafd61f1a1c6eda6a26ebd195a50e20f5bd45ae7828b1ec5b704e9
-
SSDEEP
196608:cz61PqPaDAK10OpP9KWgNQ5Av7USR5F7sOdfM7htlilL3WEMobQrbQJcGheTq:CetDAIEDN3nj73WJQLThQrbJOeT
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 2820 rundll32.exe 2820 rundll32.exe