General

  • Target

    Zoraraa2.2.zip

  • Size

    25.8MB

  • Sample

    240905-tl6x6sthrq

  • MD5

    60998608c92a3152da8c74799d69f7d9

  • SHA1

    740176948082e70efe2dafd6a92942fbdd6cf766

  • SHA256

    c12bdfc94c307beed92b1b7c9478b58a8b5c9d8521c028743a6744101215d19f

  • SHA512

    87763e7a9e37ae8614e82cda4dccd8dcc58ab49309c07f257967aef40c0faabaad7d1600660fa7b177baa56bb4b2c73ab14cbec6d1f9638368b54f27d6aebbde

  • SSDEEP

    786432:Q9H7en4YGNeLoVv54u7r9HmMXb9teNgZsyWn:WKnd6eLkB4u7r9HmXvyU

Score
3/10

Malware Config

Targets

    • Target

      Zoraraa2.2.zip

    • Size

      25.8MB

    • MD5

      60998608c92a3152da8c74799d69f7d9

    • SHA1

      740176948082e70efe2dafd6a92942fbdd6cf766

    • SHA256

      c12bdfc94c307beed92b1b7c9478b58a8b5c9d8521c028743a6744101215d19f

    • SHA512

      87763e7a9e37ae8614e82cda4dccd8dcc58ab49309c07f257967aef40c0faabaad7d1600660fa7b177baa56bb4b2c73ab14cbec6d1f9638368b54f27d6aebbde

    • SSDEEP

      786432:Q9H7en4YGNeLoVv54u7r9HmMXb9teNgZsyWn:WKnd6eLkB4u7r9HmXvyU

    Score
    1/10
    • Target

      ZoraraUI.deps.json

    • Size

      2KB

    • MD5

      64cedc13b91608eeee007f1f281914b7

    • SHA1

      bdfe4ced7641f9013d9236f8e38f6675f53e5ad4

    • SHA256

      3d64b0e4158e3638255f8b26c18236637a2d3e50a66809f766cc0dc052ad70a0

    • SHA512

      575d1523182e7937e90cb61f0c6fb36de456154b5036198eb57503dd67999702e2038cbccdeb0d6f94364f55ee85fbb6a035ac1b7e1ee16dc5f446268bcc1905

    Score
    3/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.fingerprint

    • Size

      66B

    • MD5

      0c9218609241dbaa26eba66d5aaf08ab

    • SHA1

      31f1437c07241e5f075268212c11a566ceb514ec

    • SHA256

      52493422ac4c18918dc91ef5c4d0e50c130ea3aa99915fa542b890a79ea94f2b

    • SHA512

      5d25a1fb8d9e902647673975f13d7ca11e1f00f3c19449973d6b466d333198768e777b8cae5becef5c66c9a0c0ef320a65116b5070c66e3b9844461bb0ffa47f

    Score
    3/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.json

    • Size

      134B

    • MD5

      58d3ca1189df439d0538a75912496bcf

    • SHA1

      99af5b6a006a6929cc08744d1b54e3623fec2f36

    • SHA256

      a946db31a6a985bdb64ea9f403294b479571ca3c22215742bdc26ea1cf123437

    • SHA512

      afd7f140e89472d4827156ec1c48da488b0d06daaa737351c7bec6bc12edfc4443460c4ac169287350934ca66fb2f883347ed8084c62caf9f883a736243194a2

    Score
    3/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/protocols.json

    • Size

      3KB

    • MD5

      6bbb18bb210b0af189f5d76a65f7ad80

    • SHA1

      87b804075e78af64293611a637504273fadfe718

    • SHA256

      01594d510a1bbc016897ec89402553eca423dfdc8b82bafbc5653bf0c976f57c

    • SHA512

      4788edcfa3911c3bb2be8fc447166c330e8ac389f74e8c44e13238ead2fa45c8538aee325bd0d1cc40d91ad47dea1aa94a92148a62983144fdecff2130ee120d

    Score
    3/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/crl-set

    • Size

      21KB

    • MD5

      d246e8dc614619ad838c649e09969503

    • SHA1

      70b7cf937136e17d8cf325b7212f58cba5975b53

    • SHA256

      9dd9fba7c78050b841643e8d12e58ba9cca9084c98039f1ebff13245655652e1

    • SHA512

      736933316ee05520e7839db46da466ef94e5624ba61b414452b818b47d18dcd80d3404b750269da04912dde8f23118f6dfc9752c7bdf1afc5e07016d9c055fdb

    • SSDEEP

      384:Vt71+czeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1pBu:j4sBwVPDdFhVyYoPWUiuXeG0K5dQYXFr

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.fingerprint

    • Size

      66B

    • MD5

      33fc4bf1927352bc1845acdde3a6ba63

    • SHA1

      63ac2f004ac10198e729e9ccf55f6ac4f7f3c622

    • SHA256

      4ed04e713c9d8f5d80e83645b62f1be84ec0516d37f339b3d443d8f792dea113

    • SHA512

      7e38e264713750baf58dd9ad779885a7aae5a6fcb825eaa44b3cf814dd09cd0bf8f95b5ab5db600d19a64b02ec2155b4c9a3bc2a86e9b18eece8b3100e8c2ff1

    Score
    3/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.json

    • Size

      113B

    • MD5

      b6911958067e8d96526537faed1bb9ef

    • SHA1

      a47b5be4fe5bc13948f891d8f92917e3a11ebb6e

    • SHA256

      341b28d49c6b736574539180dd6de17c20831995fe29e7bc986449fbc5caa648

    • SHA512

      62802f6f6481acb8b99a21631365c50a58eaf8ffdf7d9287d492a7b815c837d6a6377342e24350805fb8a01b7e67816c333ec98dcd16854894aeb7271ea39062

    Score
    3/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Crashpad/settings.dat

    • Size

      280B

    • MD5

      7a5496964e2972b8566c2abbbd1d9b14

    • SHA1

      d9746ceeaa4a13f6e41304a30205ef1aa5b13391

    • SHA256

      c9c46c1702d26a7904901e5dfab069e857708d3664f2ae13b3880e6138dbc031

    • SHA512

      3dbad8eac5df9e5516376bf459f9935b2be4ea1ed88368b75d20d8e5eac320809ae09336cd1a178293da789b3d36f11e6c20b9c7a11683ba75724b50343dfb3c

    Score
    3/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Crashpad/throttle_store.dat

    • Size

      20B

    • MD5

      9e4e94633b73f4a7680240a0ffd6cd2c

    • SHA1

      e68e02453ce22736169a56fdb59043d33668368f

    • SHA256

      41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304

    • SHA512

      193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337

    Score
    3/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0

    • Size

      44KB

    • MD5

      064672ccf931d9c38739ed888b543675

    • SHA1

      54e1af29265bd0e9f87b7451c31f1a87307d3e15

    • SHA256

      1d270b88f1cfa75ae0098e5b43bb345a0a6eeabcd601f6fb2eeb3f53e5b72de3

    • SHA512

      6ce4b4c767bdd9082c3936432436ffa07af39d9774972cc81ce3c8ba4618e3612fc7b2065015ea29d4702100fe7077739c3ab1fc69dd243673671362fe3b0d4b

    • SSDEEP

      3:MsFlYhXllLlX8lHSlFtbGlf+flc2l:/Fiz10ylLlNc2

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1

    • Size

      264KB

    • MD5

      a21fba8dd41805972d23bdbf2b6b4aa0

    • SHA1

      2bf66fbf23675cd4209a6e63ca33fef1f7ce0661

    • SHA256

      d02a0668ce395e9f6968e82b8ba704a6fda3e57db0241340db8e173955658ec7

    • SHA512

      3348d14ad807e3343b4f73a741b042bc189850cc7a4adf6245a5ed59854bdfe5224d2a39533868d4fa37f6a1caa0e1f59fe5828f3e373eaef8a88809f447fa6c

    • SSDEEP

      6:/M/PXGuEVt00Ey6lS48YwKfdMGYCCcgJU0OhI:U/PXK00Ey0S45dMGYCGU0Oa

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2

    • Size

      8KB

    • MD5

      0962291d6d367570bee5454721c17e11

    • SHA1

      59d10a893ef321a706a9255176761366115bedcb

    • SHA256

      ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

    • SHA512

      f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

    • SSDEEP

      3:MsHlDll:/H

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3

    • Size

      4.0MB

    • MD5

      5a0c007d51685d79e150bf289f109c50

    • SHA1

      f48ecd2d3276995d6b25b6ecd2d80d80d345704a

    • SHA256

      1856ef61e367712ae236342359e416bf636b868bafe0cd70a97767afba16693e

    • SHA512

      6be2a4bd269a2e9b388ce455a2fe435d0b0fe874fc7a3081464cb1f69f5351b886f3b558678fb7fe3b6383490a77a6af9c600a4faafb9597a642a3ceee884b0f

    • SSDEEP

      96:ibXHFesYsrCBDt1bu4tyXiF10VM7cTOF2A3dFniudVR:iRemrClzbPIyAQP

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001

    • Size

      170KB

    • MD5

      d9d5de59488c160ec82077a175384aff

    • SHA1

      0d3b0b2ad7636793e06406682dba49fc043000b7

    • SHA256

      d50aeef84ae7e3685863249d28f6322e952792940fc5c851d921c9836332dab9

    • SHA512

      daa64356473dc7143a864aa77895fd7258d61a5e4b6316fa4b4a258b18e20ef3805feed596fffd73dd7eb7e23522f097b5ba68ff705928c761aa20c38c08f3f2

    • SSDEEP

      3072:TAdbCxeQJhYeIh+NXmqdFa+rzFu/UBILrcTypuQpBMBpB6AclI6Wy826:TA5CrYt8xmOFzAU8puQpBM1GUj

    Score
    3/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index

    • Size

      512KB

    • MD5

      820c3b4e7c8ca9b94b495526a6760111

    • SHA1

      d2f051e88f6e92e5fe243ff51fcb111444c90d7d

    • SHA256

      ba0136be97ed0c3745d3f7d52303cff48a9e1ec2862fec0c750ab9c815cdb3be

    • SHA512

      bdedc5252304f37ce98013c2d321bc609d7c5bd1c90eb01bdcd6cdc2eebffdfea141782101a6cb7ed041e4d5f81222f6724783b910d53d7e70e005668018f753

    • SSDEEP

      3:LstlnllllllnlNKBOtUlNnMNtl:LsXnt/lnl6tmN

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/Code Cache/js/index

    • Size

      24B

    • MD5

      54cb446f628b2ea4a5bce5769910512e

    • SHA1

      c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

    • SHA256

      fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

    • SHA512

      8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index

    • Size

      48B

    • MD5

      516786a6965ce5cd00ab69c545e32287

    • SHA1

      5e29a5b400a2b343f166a0c725486e2d4e287985

    • SHA256

      981bb988e3007e8a86f7efda7f4449a9e3116e4551f00fd8f5640baa60466ca1

    • SHA512

      51c8b6439f164b89a3878e6e91e7dace13630fe22908226270a012fdd87d234394f6c15ab9f9822b49a37efa82695e63a52bfca2280583c8d8f39561100ac46a

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/Code Cache/wasm/index

    • Size

      24B

    • MD5

      54cb446f628b2ea4a5bce5769910512e

    • SHA1

      c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

    • SHA256

      fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

    • SHA512

      8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index

    • Size

      48B

    • MD5

      3c7050aeb2dadac9753ce39c5b75af50

    • SHA1

      f33bf35805dd5447ac64900f3b7aa2c04da1be46

    • SHA256

      f100360bc68bebfe7668ced6ec48499cd193d82693d421360a8e764513d766d2

    • SHA512

      0d0bb65e11073076333220f952d851ad5a03a05d2345923e9a941bed63842279697e76fb3a10a7d3740653cf625a48629138e0ed9c750d41f97f999ff854f8d1

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/DIPS

    • Size

      36KB

    • MD5

      18d7aaadb7da4313c62065d660d4f9f4

    • SHA1

      27b4051b7287151513e4570ccf59d71a8cc12d96

    • SHA256

      b998c08b6a425df13d68f175476d3cef5653f70d2d49de6a1f0c6e650f63fdc7

    • SHA512

      09b5ee420e9bbb4162cad7c3938e68511cae8982854a7327f20fcd701ddda6d743b94f2934ee4fe81ed840b6d4b0f5f80918c3aa2be741f9079db695b0b5ac68

    • SSDEEP

      48:TLfQq3qhmJ/O439Y2LNW9WjWbfl4pwU1cCB:fNEmJm439VLNW9WjWbfltq

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_0

    • Size

      8KB

    • MD5

      cf89d16bb9107c631daabf0c0ee58efb

    • SHA1

      3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

    • SHA256

      d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

    • SHA512

      8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

    • SSDEEP

      3:MsFl:/F

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1

    • Size

      264KB

    • MD5

      1839c7fd16240cd4b94a6d8048870e97

    • SHA1

      5ef29d2085b9f3c6c00d847f5363d5154eeb4b8c

    • SHA256

      dd12ff44af3d7c8bf4e917f0d4d40e382965a63bea5cec54c138d41c74673689

    • SHA512

      334afcccd30725d4847f49a301fa846180bf6042bd66952257786b5dff25cfcbef5ec5e38476cd57fa18df3091fec146b21a37199a64f56e99b392e85cd30368

    • SSDEEP

      3:MsEllllkEthXllkl2zEWllzTl:/M/xT02zd

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_2

    • Size

      8KB

    • MD5

      0962291d6d367570bee5454721c17e11

    • SHA1

      59d10a893ef321a706a9255176761366115bedcb

    • SHA256

      ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

    • SHA512

      f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

    • SSDEEP

      3:MsHlDll:/H

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_3

    • Size

      8KB

    • MD5

      41876349cb12d6db992f1309f22df3f0

    • SHA1

      5cf26b3420fc0302cd0a71e8d029739b8765be27

    • SHA256

      e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

    • SHA512

      e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

    • SSDEEP

      3:MsGl3ll:/y

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index

    • Size

      256KB

    • MD5

      e9895f3971e30cdd57182de39fd59479

    • SHA1

      fede5abc578b39fb0c5916db14618f848b2c7a3c

    • SHA256

      d448af11845a9f1b9242d94206a2fe10ed2a8f20b00673c753918f03722467a4

    • SHA512

      926746683c3d31270f2dede15985348e14f90ecdb19751a64056effc6d3ff3898dc9a6421c1486d1e911d56107175c3da0605e32ec731cd0111d57f1c8dd547c

    • SSDEEP

      3:Lsvllllkll/lsK:Ls9/lEtr

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_0

    • Size

      8KB

    • MD5

      cf89d16bb9107c631daabf0c0ee58efb

    • SHA1

      3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

    • SHA256

      d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

    • SHA512

      8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

    • SSDEEP

      3:MsFl:/F

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1

    • Size

      264KB

    • MD5

      b8a8b4ea0dd7f457b4ec1fb7214b8ffe

    • SHA1

      bd9cb3e21639ac20e4730c754de5240c8b682e84

    • SHA256

      148307a91adc424417d0749bce0bafc669a2839855cd0678e83428bbc75f5726

    • SHA512

      3ff0cf6234759fd96c8bb38620e09b713d7cea4629dd5c430ace9d246c08783e631915792245a5bed0509f5c0b0aa6b3daed7072805d855d2bf6eededa8bd906

    • SSDEEP

      3:MsEllllkEthXllkl2zEWll8T:/M/xT02zd6

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_2

    • Size

      8KB

    • MD5

      0962291d6d367570bee5454721c17e11

    • SHA1

      59d10a893ef321a706a9255176761366115bedcb

    • SHA256

      ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

    • SHA512

      f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

    • SSDEEP

      3:MsHlDll:/H

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_3

    • Size

      8KB

    • MD5

      41876349cb12d6db992f1309f22df3f0

    • SHA1

      5cf26b3420fc0302cd0a71e8d029739b8765be27

    • SHA256

      e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

    • SHA512

      e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

    • SSDEEP

      3:MsGl3ll:/y

    Score
    1/10
    • Target

      ZoraraUI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index

    • Size

      256KB

    • MD5

      a2b34cc0b918f7d4bb6085c53387db4a

    • SHA1

      447d635c5956e837c39482f83835c8163a7c4691

    • SHA256

      ec57d7079fdd39fdacfa9c07f33728c4837b559a1b4bb89ff05145e5a9f210c1

    • SHA512

      13182e447228b110a5d515f45b5bfea413c260fc8bbce3ce2807e7213d728089b487def1016ed19b25ac2b4c205c2ed2ca9533e751c5d682373d1145dfd97bac

    • SSDEEP

      3:Lsvllllkll/lma:Ls9/lEtt

    Score
    1/10
    • Target

      xxhash.dll

    • Size

      46KB

    • MD5

      249a5f6ca047df2a2f802782696c7f80

    • SHA1

      6a1d96be0f497d689fb55de70284af83cac61f52

    • SHA256

      2828e3014c3283caeb1b00d14145a42f4e347e7f547b40634540394892265671

    • SHA512

      d2d0b6ba2ec95c33609d98788e5a4cce382d93721ea5dea61cde3f4c065b06530a0b01ae4909f7883a81d55529a36cb6a5820aa2afc320b5761f6f59a3a45f1f

    • SSDEEP

      768:zziPp7yW4k3QDn24NuDUSu0MKQVMNKuxYAuogba4Mk3QimeSyygGz1K:zziR74kgDn2rDRuIrN5mAvgbTgi3SylI

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks