Analysis
-
max time kernel
212s -
max time network
301s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
15-09-2024 05:46
General
-
Target
ZoraraUI.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-hi.hyb
-
Size
687B
-
MD5
0807cf29fc4c5d7d87c1689eb2e0baaa
-
SHA1
d0914fb069469d47a36d339ca70164253fccf022
-
SHA256
f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
-
SHA512
5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\ZoraraUI.exe.WebView2\EBWebView\hyphen-data\101.0.4906.0\hyph-hi.hyb1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx