9a5660d44f613410a4d517ff40e832b1bd7716b0436c0141af8606de43617bcc | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05/10/2024, 17:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Zorara.dll
Size

12.0MB
MD5

2e0c82462191ddfac1c787cbc8319160
SHA1

e60a6b81fb0d6fc25ef325bcf450152e4f192abf
SHA256

6c10cfb739cf8073acf9e0a93e679f7f7dab36b1645da0cf9529c199cb1d21a1
SHA512

fee3678a70408b0897db696057011f095239396dcf0331c98a09b853863fb804613e71c366cddbc82802bde9980b4e171511f0b40a8d4cef9b2223ec29bf4ce9
SSDEEP

196608:JAGyisuJVCI4G8Oz2c16kR/aHvEr+INvYqAmRyqEbrBXoLGwvwy4ETHB:JdzsuTCIBa2/aHMctm4TbVzgh

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
3068	rundll32.exe
3068	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Zorara.dll,#1
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:3068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads