Analysis
-
max time kernel
1s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
05/09/2024, 16:09
General
-
Target
ZoraraUI.exe.WebView2/EBWebView/Crashpad/settings.dat
-
Size
280B
-
MD5
7a5496964e2972b8566c2abbbd1d9b14
-
SHA1
d9746ceeaa4a13f6e41304a30205ef1aa5b13391
-
SHA256
c9c46c1702d26a7904901e5dfab069e857708d3664f2ae13b3880e6138dbc031
-
SHA512
3dbad8eac5df9e5516376bf459f9935b2be4ea1ed88368b75d20d8e5eac320809ae09336cd1a178293da789b3d36f11e6c20b9c7a11683ba75724b50343dfb3c
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\ZoraraUI.exe.WebView2\EBWebView\Crashpad\settings.dat1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx