Overview
overview
6Static
static
3Microsoft....re.dll
windows11-21h2-x64
1Microsoft....ms.dll
windows11-21h2-x64
1Microsoft....pf.dll
windows11-21h2-x64
1Zorara.dll
windows11-21h2-x64
1ZoraraUI.exe
windows11-21h2-x64
1ZoraraUI.exe
windows11-21h2-x64
6bin/Monaco/index.html
windows11-21h2-x64
6bin/Monaco...ain.js
windows11-21h2-x64
3bin/Monaco...lua.js
windows11-21h2-x64
3bin/Monaco...ain.js
windows11-21h2-x64
3bin/Monaco....de.js
windows11-21h2-x64
3bin/Monaco....es.js
windows11-21h2-x64
3bin/Monaco....fr.js
windows11-21h2-x64
3bin/Monaco....it.js
windows11-21h2-x64
3bin/Monaco....ja.js
windows11-21h2-x64
3bin/Monaco...nls.js
windows11-21h2-x64
3bin/Monaco....ko.js
windows11-21h2-x64
3bin/Monaco....ru.js
windows11-21h2-x64
3bin/Monaco...-cn.js
windows11-21h2-x64
3bin/Monaco...-tw.js
windows11-21h2-x64
3bin/Monaco...der.js
windows11-21h2-x64
3libcrypto-3-x64.dll
windows11-21h2-x64
1libssl-3-x64.dll
windows11-21h2-x64
1runtimes/w...er.dll
windows11-21h2-x64
1runtimes/w...er.dll
windows11-21h2-x64
1runtimes/w...er.dll
windows11-21h2-x64
3xxhash.dll
windows11-21h2-x64
1zstd.dll
windows11-21h2-x64
1Analysis
-
max time kernel
149s -
max time network
158s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
09/09/2024, 11:30
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
Zorara.dll
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
ZoraraUI.exe
Resource
win11-20240802-en
Behavioral task
behavioral6
Sample
ZoraraUI.exe
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
bin/Monaco/index.html
Resource
win11-20240802-en
Behavioral task
behavioral8
Sample
bin/Monaco/vs/base/worker/workerMain.js
Resource
win11-20240802-en
Behavioral task
behavioral9
Sample
bin/Monaco/vs/basic-languages/lua/lua.js
Resource
win11-20240802-en
Behavioral task
behavioral10
Sample
bin/Monaco/vs/editor/editor.main.js
Resource
win11-20240802-en
Behavioral task
behavioral11
Sample
bin/Monaco/vs/editor/editor.main.nls.de.js
Resource
win11-20240802-en
Behavioral task
behavioral12
Sample
bin/Monaco/vs/editor/editor.main.nls.es.js
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
bin/Monaco/vs/editor/editor.main.nls.fr.js
Resource
win11-20240802-en
Behavioral task
behavioral14
Sample
bin/Monaco/vs/editor/editor.main.nls.it.js
Resource
win11-20240802-en
Behavioral task
behavioral15
Sample
bin/Monaco/vs/editor/editor.main.nls.ja.js
Resource
win11-20240802-en
Behavioral task
behavioral16
Sample
bin/Monaco/vs/editor/editor.main.nls.js
Resource
win11-20240802-en
Behavioral task
behavioral17
Sample
bin/Monaco/vs/editor/editor.main.nls.ko.js
Resource
win11-20240802-en
Behavioral task
behavioral18
Sample
bin/Monaco/vs/editor/editor.main.nls.ru.js
Resource
win11-20240802-en
Behavioral task
behavioral19
Sample
bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
Resource
win11-20240802-en
Behavioral task
behavioral20
Sample
bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
Resource
win11-20240802-en
Behavioral task
behavioral21
Sample
bin/Monaco/vs/loader.js
Resource
win11-20240802-en
Behavioral task
behavioral22
Sample
libcrypto-3-x64.dll
Resource
win11-20240802-en
Behavioral task
behavioral23
Sample
libssl-3-x64.dll
Resource
win11-20240802-en
Behavioral task
behavioral24
Sample
runtimes/win-arm64/native/WebView2Loader.dll
Resource
win11-20240802-en
Behavioral task
behavioral25
Sample
runtimes/win-x64/native/WebView2Loader.dll
Resource
win11-20240802-en
Behavioral task
behavioral26
Sample
runtimes/win-x86/native/WebView2Loader.dll
Resource
win11-20240802-en
Behavioral task
behavioral27
Sample
xxhash.dll
Resource
win11-20240802-en
Behavioral task
behavioral28
Sample
zstd.dll
Resource
win11-20240802-en
General
-
Target
Zorara.dll
-
Size
14.7MB
-
MD5
307d88738588c6e92dd314f1def2d948
-
SHA1
ec91c9edc1fea9fad3a6a07aaab9e1601865674a
-
SHA256
0b1f2977a3e0d737fd91048379ee2e6277b8b4675091b3f4413dfc2fc9dd8f00
-
SHA512
f3d020c58fd1b7c8c1c91e59d4699ad05012f5c4ea59cb3c3546aa29e1e90165af13908f6a1461f24c923ff00da15ad26a1c28e6f3c70f24cec71117ebcce67f
-
SSDEEP
196608:2rqkTIEXyMe4yI0wQ4QtZYyc17EOa8a3BCZadMfs9k4bqwOmJUhpi5v7Q:2rVsEin4ZQ9Zjc9FKxC8ME9nchM58
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4564 rundll32.exe 4564 rundll32.exe