Overview

overview

6

Static

static

3

Zorarmeowa2.5.zip

windows11-21h2-x64

1

Microsoft....re.dll

windows11-21h2-x64

1

Microsoft....ms.dll

windows11-21h2-x64

1

Microsoft....pf.dll

windows11-21h2-x64

1

Newtonsoft.Json.dll

windows11-21h2-x64

1

Zorara.dll

windows11-21h2-x64

5

ZoraraUI.exe

windows11-21h2-x64

1

ZoraraUI.exe

windows11-21h2-x64

5

ZoraraUI.e...001.gz

windows11-21h2-x64

3

ZoraraUI.e...re.dll

windows11-21h2-x64

1

ZoraraUI.e...pet.js

windows11-21h2-x64

3

ZoraraUI.e...dm.dll

windows11-21h2-x64

1

ZoraraUI.e..._1.zip

windows11-21h2-x64

1

ZoraraUI.e..._1.zip

windows11-21h2-x64

1

ZoraraUI.e..._1.zip

windows11-21h2-x64

1

ZoraraUI.e..._1.zip

windows11-21h2-x64

1

Microsoft....re.dll

windows11-21h2-x64

1

ZoraraUI.e..._1.zip

windows11-21h2-x64

1

ZoraraUI.e..._1.zip

windows11-21h2-x64

1

ZoraraUI.e..._1.zip

windows11-21h2-x64

1

ZoraraUI.e..._1.zip

windows11-21h2-x64

1

ZoraraUI.e..._1.zip

windows11-21h2-x64

1

bin/Monaco/index.html

windows11-21h2-x64

6

bin/Monaco...ain.js

windows11-21h2-x64

3

bin/Monaco...ain.js

windows11-21h2-x64

3

bin/Monaco...der.js

windows11-21h2-x64

3

libcrypto-3-x64.dll

windows11-21h2-x64

1

libssl-3-x64.dll

windows11-21h2-x64

1

runtimes/w...er.dll

windows11-21h2-x64

1

runtimes/w...er.dll

windows11-21h2-x64

3

xxhash.dll

windows11-21h2-x64

1

zstd.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    92s
  • max time network
    95s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    13-09-2024 10:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ZoraraUI.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/adblock_snippet.js

  • Size

    2KB

  • MD5

    f5c93c471485f4b9ab45260518c30267

  • SHA1

    ee6e09fb23b6f3f402e409a2272521fdd7ad89ed

  • SHA256

    9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690

  • SHA512

    e50a1baf20db9bc867e85ab72f9976430e87d8516ca552f9342a5c91822c9e1404e4f915042d48d841cca3fb16fd969bf0aa01195791ce29de63c45814fcdcda

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe "C:\Users\Admin\AppData\Local\Temp\ZoraraUI.exe.WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.55\adblock_snippet.js"
    1⤵
      PID:5768

    Network

    MITRE ATT&CK Matrix ATT&CK v13

    Initial Access

    Execution

    Command and Scripting Interpreter

    1
    T1059

    JavaScript

    1
    T1059.007

    Persistence

    Privilege Escalation

    Defense Evasion

    Credential Access

    Discovery

    Lateral Movement

    Collection

    Exfiltration

    Command and Control

    Impact

    Resource Development

    Reconnaissance

    Replay Monitor

    Loading Replay Monitor...

    Downloads