Analysis
-
max time kernel
2s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
15-09-2024 05:46
General
-
Target
ZoraraUI.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-as.hyb
-
Size
703B
-
MD5
8961fdd3db036dd43002659a4e4a7365
-
SHA1
7b2fa321d50d5417e6c8d48145e86d15b7ff8321
-
SHA256
c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
-
SHA512
531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\ZoraraUI.exe.WebView2\EBWebView\hyphen-data\101.0.4906.0\hyph-as.hyb1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx