Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
314s -
max time network
407s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
14/09/2024, 21:34
General
-
Target
Zorara.dll
-
Size
12.3MB
-
MD5
f4788ae5475be2894d79eaf6d5f8efd4
-
SHA1
545597ea55b56eb5a2475ab7bbdf336f6a9d7355
-
SHA256
71a60f2158f4f5cc391e491d6bc081c7b772c1ef5cffa603db5e5da6c4ca9cbe
-
SHA512
002954a07745cdc6cf6fd05c040b5fc99677c736fbcc7c0f10409c41dcca6bef2ab63f21208ac6d1b1822107a0d1a5519b493fd39065c2b4057bb014ad4f4ea1
-
SSDEEP
196608:S5cT4GRVBljcpCKROUiX9DTXIOCUgHIC+849ooGEA2YII8ec6NTo+wEx:3R4gUOkOCU9C+849Ti2YIPecIeEx
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Zorara.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.5MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
20.7MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
20.7MB
-
Filesize
7.5MB
-
Filesize
20.7MB