Analysis

  • max time kernel
    88s
  • max time network
    192s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    15-09-2024 05:46

General

  • Target

    ZoraraUI.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-hu.hyb

  • Size

    309KB

  • MD5

    37b1f197e8dfbafdac4597edcf673e63

  • SHA1

    e672c6870417c71acdcda6c16a7185d7a868eb68

  • SHA256

    8b3a16268cc932b226c17ff405b3cfb6eb38a9511a2043d653dc03729efceac1

  • SHA512

    69ee820439633b348bf8efdd3c498a30270753e53ff78d022bd1b295c6c95e0501955009f610a12fc55c786a563b0af40d2b69a7584b47662b943acbac2d3634

  • SSDEEP

    6144:wxOMr0dBjIg2U0RT7c25PkvQoc6yzRcOmpTeIrDh2ky5khBh13kwTbqgT3Gfhh4D:wvkufNkzFtuWlAh36

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\ZoraraUI.exe.WebView2\EBWebView\hyphen-data\101.0.4906.0\hyph-hu.hyb
    1⤵
    • Modifies registry class
    PID:3532
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:1624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads