Overview

overview

3

Static

static

3

ZoraraVVVER2.8.zip

windows11-21h2-x64

1

ZoraraUI.deps.json

windows11-21h2-x64

3

ZoraraUI.r...g.json

windows11-21h2-x64

3

bin/Monaco...in.css

windows11-21h2-x64

3

settings.txt

windows11-21h2-x64

3

workspace/...le.txt

windows11-21h2-x64

3

workspace/...et.txt

windows11-21h2-x64

3

workspace/...le.txt

windows11-21h2-x64

3

workspace/..._1.txt

windows11-21h2-x64

3

workspace/..._2.txt

windows11-21h2-x64

3

workspace/...le.txt

windows11-21h2-x64

3

workspace/...le.txt

windows11-21h2-x64

3

workspace/...tefile

windows11-21h2-x64

1

workspace/...le.txt

windows11-21h2-x64

3

workspace/...29.txt

windows11-21h2-x64

3

workspace/...22.lua

windows11-21h2-x64

3

workspace/...ed.txt

windows11-21h2-x64

3

workspace/...le.txt

windows11-21h2-x64

3

workspace/...le.txt

windows11-21h2-x64

3

workspace/...es.txt

windows11-21h2-x64

3

workspace/...t.json

windows11-21h2-x64

3

workspace/...em.png

windows11-21h2-x64

3

workspace/...n1.png

windows11-21h2-x64

3

workspace/...on.png

windows11-21h2-x64

3

workspace/...nd.png

windows11-21h2-x64

3

workspace/...on.png

windows11-21h2-x64

3

workspace/...st.png

windows11-21h2-x64

3

workspace/...r1.png

windows11-21h2-x64

3

workspace/...on.png

windows11-21h2-x64

3

workspace/...on.png

windows11-21h2-x64

3

xxhash.dll

windows11-21h2-x64

1

zstd.dll

windows11-21h2-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ZoraraVVVER2.8.zip

  • Size

    17.2MB

  • Sample

    240928-d5ltcavdpk

  • MD5

    eeb1f486796fc8c3df741e7c3bd650bb

  • SHA1

    d6050ceff916d281d0c2cd30e851a2546c5df5db

  • SHA256

    9e3fa0ed7868c67a11c03bd90a40c9a7e49b305019064b78a0dbc30d7c7d47b0

  • SHA512

    629283e47d48991d8aafa3cf897bc252b3a7a6afaccf24b71cf42e23d927b8719834e9cf4841c18b032eae266c9329c8a51bfaa82479548061ca70ab3ecc8b2f

  • SSDEEP

    393216:/qmHBPYCPsypHCRrwJirTLcLy5UYrJh64ppMbwwlZ9MZBX4uG9ZvYaD4:/qmpYuqGsPIy5UYVsBZi0uiXk

Score
3/10

Malware Config

Targets

    • Target

      ZoraraVVVER2.8.zip

    • Size

      17.2MB

    • MD5

      eeb1f486796fc8c3df741e7c3bd650bb

    • SHA1

      d6050ceff916d281d0c2cd30e851a2546c5df5db

    • SHA256

      9e3fa0ed7868c67a11c03bd90a40c9a7e49b305019064b78a0dbc30d7c7d47b0

    • SHA512

      629283e47d48991d8aafa3cf897bc252b3a7a6afaccf24b71cf42e23d927b8719834e9cf4841c18b032eae266c9329c8a51bfaa82479548061ca70ab3ecc8b2f

    • SSDEEP

      393216:/qmHBPYCPsypHCRrwJirTLcLy5UYrJh64ppMbwwlZ9MZBX4uG9ZvYaD4:/qmpYuqGsPIy5UYVsBZi0uiXk

    Score
    1/10
    behavioral1

    • Target

      ZoraraUI.deps.json

    • Size

      2KB

    • MD5

      41eb12ae669dd39b2221d935c3395f6e

    • SHA1

      77038ff97a4ec1de4ae7663d3371df19d5d1515a

    • SHA256

      7c42de0b69df902f10c770c216a4d6aa147ab750ffa4d74e6bd1b593c5f37697

    • SHA512

      c98b9172d4ba4202b924c850c66167626ee3270253b975248bad4908317f02590027f33ea8963ec43f12e45a7aa577eda21c0cab5d772d40a5ce2d2f62c7ccad

    Score
    3/10
    behavioral2

    • Target

      ZoraraUI.runtimeconfig.json

    • Size

      458B

    • MD5

      07b9a30265ca4e69c7016a1b6e3ffc27

    • SHA1

      3a4af82a2695b1423aedd8b60a5c86793c011b02

    • SHA256

      c71152bf25e40d647b2440c5b39be157a3d356106be9d5b678ab97bb87b4e782

    • SHA512

      efd582f8edcdba5ef48d02eee5f73d83ff35071af99b49e08e0213928568d728d0856e3b903bfcccb9237f786846cf94da83139f99e9bee86287aff2071c3f1c

    Score
    3/10
    behavioral3

    • Target

      bin/Monaco/vs/editor/editor.main.css

    • Size

      294KB

    • MD5

      23c7db6e12f6454ef6e7fb98d17924d8

    • SHA1

      06398b44a338db5eeab2d461347334fc69af5af1

    • SHA256

      615824c59ed1e07f5924286e9f02f3120b9064d59e115d3f668a914e07839451

    • SHA512

      5ed3103e4f6640ca71e103e7f3752aca3027d8c563084d519f9d6358018ccdfacd0c4c08b69e510f88effa2b56dce04241ee7f92f3db99d9077b49ed7271d924

    • SSDEEP

      6144:TzsUTrsZ7KcNkuwcv2As0aMY/Y/RR9MtpWKco:TzsUTrsZXkW4/50i

    Score
    3/10
    behavioral4

    • Target

      settings.txt

    • Size

      10B

    • MD5

      4c65e2f855d8696d18ab503ca9f4cbfc

    • SHA1

      448a8b537b3dfa966682a496168bae8555c3c889

    • SHA256

      268eef82beb074b0ebad1eaa73261d87f97ca50dbcdde8fc5621ed50c5f1faea

    • SHA512

      c127295e977a579679201f36c9c70233ebbf70bf1cc8f6a83283d75c853935902172de3dc8b19eefddd64e182219926d5ecae944a993505e86994cc813e82b59

    Score
    3/10
    behavioral5

    • Target

      workspace/.tests/appendfile.txt

    • Size

      7B

    • MD5

      260ca9dd8a4577fc00b7bd5810298076

    • SHA1

      53a5687cb26dc41f2ab4033e97e13adefd3740d6

    • SHA256

      aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27

    • SHA512

      51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7

    Score
    3/10
    behavioral6

    • Target

      workspace/.tests/getcustomasset.txt

    • Size

      7B

    • MD5

      260ca9dd8a4577fc00b7bd5810298076

    • SHA1

      53a5687cb26dc41f2ab4033e97e13adefd3740d6

    • SHA256

      aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27

    • SHA512

      51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7

    Score
    3/10
    behavioral7

    • Target

      workspace/.tests/isfile.txt

    • Size

      7B

    • MD5

      260ca9dd8a4577fc00b7bd5810298076

    • SHA1

      53a5687cb26dc41f2ab4033e97e13adefd3740d6

    • SHA256

      aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27

    • SHA512

      51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7

    Score
    3/10
    behavioral8

    • Target

      workspace/.tests/listfiles/test_1.txt

    • Size

      7B

    • MD5

      260ca9dd8a4577fc00b7bd5810298076

    • SHA1

      53a5687cb26dc41f2ab4033e97e13adefd3740d6

    • SHA256

      aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27

    • SHA512

      51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7

    Score
    3/10
    behavioral9

    • Target

      workspace/.tests/listfiles/test_2.txt

    • Size

      7B

    • MD5

      260ca9dd8a4577fc00b7bd5810298076

    • SHA1

      53a5687cb26dc41f2ab4033e97e13adefd3740d6

    • SHA256

      aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27

    • SHA512

      51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7

    Score
    3/10
    behavioral10

    • Target

      workspace/.tests/loadfile.txt

    • Size

      1B

    • MD5

      8fa14cdd754f91cc6554c9e71929cce7

    • SHA1

      4a0a19218e082a343a1b17e5333409af9d98f0f5

    • SHA256

      252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111

    • SHA512

      711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b

    Score
    3/10
    behavioral11

    • Target

      workspace/.tests/readfile.txt

    • Size

      7B

    • MD5

      260ca9dd8a4577fc00b7bd5810298076

    • SHA1

      53a5687cb26dc41f2ab4033e97e13adefd3740d6

    • SHA256

      aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27

    • SHA512

      51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7

    Score
    3/10
    behavioral12

    • Target

      workspace/.tests/writefile

    • Size

      7B

    • MD5

      260ca9dd8a4577fc00b7bd5810298076

    • SHA1

      53a5687cb26dc41f2ab4033e97e13adefd3740d6

    • SHA256

      aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27

    • SHA512

      51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7

    Score
    1/10
    behavioral13

    • Target

      workspace/.tests/writefile.txt

    • Size

      7B

    • MD5

      260ca9dd8a4577fc00b7bd5810298076

    • SHA1

      53a5687cb26dc41f2ab4033e97e13adefd3740d6

    • SHA256

      aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27

    • SHA512

      51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7

    Score
    3/10
    behavioral14

    • Target

      workspace/286090429.txt

    • Size

      189B

    • MD5

      1d0f344952644e4f25e4508b97e8c650

    • SHA1

      f4da5bcb5875996cdb30fc6f982cf7530901622c

    • SHA256

      214f7ab4643d50045e9f33b053b22175f876e7da47d8123da6f320bc36725cc4

    • SHA512

      469f9bfa59f578ddfeafea7760d3f2892c37fd832faca6f1f0324f42aab4084f5f141542c99b9699ce673df94fcfecb6ec3a4c89076c690b8e508b34d26861a0

    Score
    3/10
    behavioral15

    • Target

      workspace/vape/CustomModules/8560631822.lua

    • Size

      959B

    • MD5

      ebfe58d9e4554580dd88cd3af55ffc0e

    • SHA1

      15d08c4f014c2d98b55e88745fb6651c2bc2b3d8

    • SHA256

      dc87da0656a10fb1ae0e45b6bc675ba589193bbe97d9c5b866df92dac5411db1

    • SHA512

      811e0fad71833c43eb5103ad1a57047300e7d237263c09167dd3c62331df4282a8b31e25d425d23805f6c10e9675d3475a29e3fc60e51b31748d47d0e786544a

    Score
    3/10
    behavioral16

    • Target

      workspace/vape/CustomModules/cachechecked.txt

    • Size

      8B

    • MD5

      723aa82a83c278d5e7e7be9b109b406a

    • SHA1

      ec734b651574683f36974c7f12847fbbe084dbe2

    • SHA256

      1c34f88707b55e6104c4eb20e71ffa3d33e414b71ef689a15fad0640d0ac58cb

    • SHA512

      4531c2506478afd163726a5d6ffd8c64c24819545d906526aa749361e634556595d3b0f6b606c2bfd069e4938168d7cde18c60ea44475e339707472729eff10d

    Score
    3/10
    behavioral17

    • Target

      workspace/vape/Profiles/1430993116GUIPositions.vapeprofile.txt

    • Size

      3KB

    • MD5

      90ccebee1eb875f18ab596dd4b43bd92

    • SHA1

      e6bebaea432cf2cdf8c8f924928b71638ab9e89b

    • SHA256

      5bc1d9fdd1b23b8dd7808bd449d3a24001db3089ab8324ddca33a84fe3d73c1b

    • SHA512

      a49588014ccba04001ceefcfb2e73c7b4347d9a5a9c77d3a61a4d353396d917bfc48d4887c89129ed8c2ef4e9aa5cebf05f25d62e994f75465f0ee71fdf973eb

    Score
    3/10
    behavioral18

    • Target

      workspace/vape/Profiles/4483381587.vapeprofile.txt

    • Size

      15KB

    • MD5

      4f51748e585715ecc8a937949bfd576b

    • SHA1

      3a26c1a5686685af3502204546b398224d8abd89

    • SHA256

      c70afccc05cb4ee25ec4733615984f1c50055d75d43786c627fb8e5c09e8427a

    • SHA512

      a9c4f938ac1a60d06be1b577dc130085e1c2e238d231fd82d7976079cdfa4351ef443cab0386a92fe113ac307a00fb9df6a79d096c0a68cd6206a476bfa57a64

    • SSDEEP

      384:SsnVZugPwwEhuldHAfZFykPQGult2QFLE7T1gLuHF1uouro9OPwj0TGyLAekUoqB:SsnVZugPwwEhuldHAfZFykPQGult2QFD

    Score
    3/10
    behavioral19

    • Target

      workspace/vape/Profiles/4483381587.vapeprofiles.txt

    • Size

      42B

    • MD5

      69ce77d65ab84356bd699a26ec0366b8

    • SHA1

      9156be62bda054fc64c535e5f1fe8d8d1cc24828

    • SHA256

      37b2cea7a7f8f45a5dcbacb1caf81e57cc6451790f1025d13e084e586429036b

    • SHA512

      cdb422d1d3adae079146c2e874029cc865c4c08ce87a90bcabeda64397636798dbdcd6b85af5d26ad2b977bb0b9dc47ed651d663f48f9cae96d252feb21995ae

    Score
    3/10
    behavioral20

    • Target

      workspace/vape/Profiles/whitelist.json

    • Size

      12KB

    • MD5

      177202a310e930e578a6c14a855e950c

    • SHA1

      4569ea072670c46f9a5486d22230262ecfc1f8bf

    • SHA256

      4977bbe485f9a6bb5b86d723be2d7d68f2a477194aa00cea991fe4a537434eee

    • SHA512

      435b25f8d97ccead7961e5a10e9d420163fecbb836f5d1d9aef2a56049679fabf9b3871c0927af16957f82cecfc8bbd63da0622593f7e6a935f06cff349a75dd

    • SSDEEP

      192:YJPZVTJhqxBSP7BhbCux3TEHGgdZNM8gAzWdHP9f8QMUhRKUcuLhD9SWP:mDbSHVZ5IP

    Score
    3/10
    behavioral21

    • Target

      workspace/vape/assets/AddItem.png

    • Size

      461B

    • MD5

      07906a3374b605b797ce83f4c3db60ce

    • SHA1

      dac5b9a840328d2d12b313dd745c6079be55c999

    • SHA256

      950cfadffc21fac7a44139dfed498cd15cdd5ee0166e5e3c84f12d6822e171fa

    • SHA512

      6878fda123a92c16082bdfb86dd9996b6f265b1d72bd34a62d84c1202ebb76bc31763ba96d146f161496e2146b533d7db5d088c5aeae4f1b4899e45d22504180

    Score
    3/10
    behavioral22

    • Target

      workspace/vape/assets/AddRemoveIcon1.png

    • Size

      212B

    • MD5

      a98b4b05d9f4c29d122549a1f6e47741

    • SHA1

      e92eb75ceae642141da9f1681a83d8f124d268f5

    • SHA256

      243c556d597658ef1b7a753adbe93aa905eab947195705961bb01e567424aaea

    • SHA512

      9ecb763db9af78903f7f82fddcbc69c5c771053cc551c7d6c2872f79e100456a2e364edb1759db8a1e5a0ee9fdca651f5911d7dcc34d5c0f52ae31e9dd7e3017

    Score
    3/10
    behavioral23

    • Target

      workspace/vape/assets/BackIcon.png

    • Size

      497B

    • MD5

      3e1787f34063ff5c6939f090b3fea8a3

    • SHA1

      b8d87951d372f1b6ddf417828d419ea82d0ca328

    • SHA256

      027669b2b947a5063a5c7b78714e1391074a92a65c3e75ab7c4c2585a661e97a

    • SHA512

      cc253f4c0971a59740338359be9c6a91f213a51ef45d81f812a75c5cb962f850b0de2e2819acd8d9a55ee3274cc8b4ac8b28d07f79153671ba761e7c3ee048a5

    Score
    3/10
    behavioral24

    • Target

      workspace/vape/assets/BindBackground.png

    • Size

      498B

    • MD5

      fd0728676be0e6ffd15b61a933dff119

    • SHA1

      6115d8b35e12b7debb3afb04654aa52e65294b58

    • SHA256

      fa4d5b615d69bb856704e1fb55b9c7b59c03092d933708718992e83121053679

    • SHA512

      720c0579377abbcfd1d9031190f30ac77e6277eaf4da84642ce3bb329fce3591b9ece0560e2cb1b16fcc24de762aff00c194045a7a843308c5c75e98b79b0079

    Score
    3/10
    behavioral25

    • Target

      workspace/vape/assets/BlatantIcon.png

    • Size

      642B

    • MD5

      4a121085f63ed15f1559f5c07b8bd0e5

    • SHA1

      91399a321971b993c9611fac72557fb2b5480c8c

    • SHA256

      25b047074947710c1244d1695d85b14615e2f66358aee9222e6217fe8a3b4a76

    • SHA512

      474eb5165f0daf67301099d5cd1e867a8981a8d83d5d6b8f841589149b530d4cb5f4b6947238ed784721ef16c3e1554f6452902c760e25af52388bf3c83e2bf5

    Score
    3/10
    behavioral26

    • Target

      workspace/vape/assets/CircleListBlacklist.png

    • Size

      475B

    • MD5

      b51c669fb9a1ed43c7276d049b4e8dbd

    • SHA1

      d58033fa1693d37b9bbd18612fd265f96413b1a5

    • SHA256

      5007107210af7cd25578e767e6c88a123f5cb8e5854bd509968cf3cb5467eb2d

    • SHA512

      45aa30771cbcbc459c7b42fd298ac4207726cf981d575acfbc8254c8eba2e0c9f0df617af8b465f45febc14f69bd8ee91773941962a5119f6b21832609d14675

    Score
    3/10
    behavioral27

    • Target

      workspace/vape/assets/ColorSlider1.png

    • Size

      547B

    • MD5

      db744e99f68a5b2a05cc1a8c12d213e9

    • SHA1

      7afa1d3add7a0cb548cffcddd359b97d6c16a053

    • SHA256

      f3600bd790e93abe650fddd4524ea08839f54becf71da8ecb7ea1d3a4cbecc18

    • SHA512

      2a83c72063cc3065a1e8387a0a73ace638670d59fc6317e4867c0d962feaaa57ec92943eb54a90e7a8940ae815da5d76ea602d595e4b91d183223ad7de5ebbe9

    Score
    3/10
    behavioral28

    • Target

      workspace/vape/assets/CombatIcon.png

    • Size

      512B

    • MD5

      26720182fb0f30f66b67e78a4922af8c

    • SHA1

      a50b0d57b52b4dc2857ba4ebf2c034e57eefe493

    • SHA256

      1a3e49bf0f934d6cee40f65e0cf0882d0872135986fe74516ae165e3f8f33cc3

    • SHA512

      5046e21820cbc8bc0c2a46c78b17c2a306ec041f6503b933c910f52076d1ba7fc1ef9fc3ea70968a83d155a906b7dc8bb05ee996ad4c49112b3150120e2d256d

    Score
    3/10
    behavioral29

    • Target

      workspace/vape/assets/DiscordIcon.png

    • Size

      644B

    • MD5

      04968dc0fce916e5369d25f0dbef5f2c

    • SHA1

      54fca0f2cdf469da1be272087643f803d3f895de

    • SHA256

      6159ad9acc47d927dee46b3694852eccee679cde7487ee34861866c65dd089ec

    • SHA512

      c065ff1055ed6dda040a0ed93297bc48abc31971863afcbf5606b9a468f8eea62d4c4c6dd9477367a22f221a49ed361908fd8bc619c04434bedd7a1797be7df3

    Score
    3/10
    behavioral30

    • Target

      xxhash.dll

    • Size

      46KB

    • MD5

      249a5f6ca047df2a2f802782696c7f80

    • SHA1

      6a1d96be0f497d689fb55de70284af83cac61f52

    • SHA256

      2828e3014c3283caeb1b00d14145a42f4e347e7f547b40634540394892265671

    • SHA512

      d2d0b6ba2ec95c33609d98788e5a4cce382d93721ea5dea61cde3f4c065b06530a0b01ae4909f7883a81d55529a36cb6a5820aa2afc320b5761f6f59a3a45f1f

    • SSDEEP

      768:zziPp7yW4k3QDn24NuDUSu0MKQVMNKuxYAuogba4Mk3QimeSyygGz1K:zziR74kgDn2rDRuIrN5mAvgbTgi3SylI

    Score
    1/10
    behavioral31

    • Target

      zstd.dll

    • Size

      638KB

    • MD5

      21dfe873f6ed38f2f713ecd43ad1ba41

    • SHA1

      7648cb043587da0e85743f9da8dca8be621ccdf0

    • SHA256

      2a2d63c48b6b3ac7768231ade30122c94a0a33e62e5d2725e11c95b3194aa997

    • SHA512

      67b4f976f3511387ce2a4743e2281ac88533bd204d4e07a5c6751f0ec30a3463dfabcda18103a632541ec2a8b7b937806121e21e44959411c39106e22b739919

    • SSDEEP

      6144:XbauYl+rrR8uT4uB5uWYfO16oMynnjDHMkYHbpk5tRCEybNFZemMBLx4eTTzp:XbauYGT5BYMxjDHMk0petRCEyb9emHW

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks