Overview

overview

6

Static

static

3

Application.bat

windows11-21h2-x64

6

luajit.exe

windows11-21h2-x64

1

Resubmissions

26/11/2024, 18:47

241126-xfj31atpdv 6

26/11/2024, 18:46

241126-xe42sazqgq 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Zorara.zip

  • Size

    498KB

  • Sample

    241126-xfj31atpdv

  • MD5

    935eca784190b019bddfcbd9977c9416

  • SHA1

    7dc1869d79a110f7394afe4b93c06b586185139d

  • SHA256

    6d11d8339ed8917190ba15dfbdf12c46d0a9d90b4b680edf54a8c65585e76e74

  • SHA512

    624f2b2348a4ab37855cd238b244d99f9dfdf4cfd7c8bfb2e55ad72aeee161db1d8a9e961e6e31f6be5f52a0f9c0562f49e484dc9763540c7c45ea819a9cdae3

  • SSDEEP

    12288:UmCAJEZ64ZZnv7zOCcf+X/N4mUiRvyPqBmKUU+zSy:Uc4ZZvOPBi5/BmKUBWy

Score
6/10

Malware Config

Targets

    • Target

      Application.bat

    • Size

      1KB

    • MD5

      1f886633d8933efe74279e6519035ac2

    • SHA1

      e0b8ed8660b546dbe6a6cd6808d8ea33569647ea

    • SHA256

      c8bd116c303dbf8c8f539a8353a180a1b5b51d771c820ef176359bf0f194e49e

    • SHA512

      766a3452dc1265defb8168c87d8e187c33f42bfc936aaa061678fc23093a6ca10e32c06038f4e8127c53fddf1c2994550e01e059e4581c6ab6513e2a178a63c4

    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

    • Target

      luajit.exe

    • Size

      288KB

    • MD5

      e9563030420846d2c54f73b4f5515ae6

    • SHA1

      ba4ce71542fc4e52a4d4b464d825100e76da8c1d

    • SHA256

      726ec4876adc426ecc8b9b575e4a64962e19ed112d76bca84dbbbdb96c4c4dd9

    • SHA512

      d71b90a75151e336e2418636a86ea11ebfdf1e67134db437b5ad66f8b468da0810ca86f56c2171c2e32152c7a0eaa857c6d7d6dc10fd0a1a116499bd9c2ed0de

    • SSDEEP

      3072:/UrdMUiesUvuiLrbwkCD3U1vDfRyRg821IrImnaN4gC6Tq:K2UpvpTwkCD3UZfIie22N9

    Score
    1/10
    behavioral2

MITRE ATT&CK Matrix

Tasks