Analysis
-
max time kernel
92s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29/09/2024, 15:21
General
-
Target
Zorara.dll
-
Size
14.2MB
-
MD5
e9f7a600f1c3c30e2ef9576bf7cea03b
-
SHA1
700017e157bec2e9f72bceffcdeab36004a9c820
-
SHA256
439c9fc897dd7026df5b9579f45b712516b4b22f4ffe3324694202530e3ba23c
-
SHA512
81606aa1d2c3d2e604c201bd7803e28f22a0e60f0fe9e6b05d16c2cb1dd9bea54649d2b15bd1b1187a62e5fb6644964e7274d21d50854e33312d017e050f7a3c
-
SSDEEP
393216:i8kK1+g5u+l7ylz47SB1S9v1b7z2N+KJeRV:ic+cue08w+KJe
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Zorara.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.4MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
23.8MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
1.1MB
-
Filesize
8.4MB
-
Filesize
23.8MB