6ae34a03b7072f4e54b5f974915bc44c99bc73b743752880973a60202a452334 | Triage

Submit
Reports

Overview

overview

Static

static

Zorara-v2....64.zip

windows7-x64

1

Zorara-v2....64.zip

windows10-2004-x64

1

Zorara-v2....ra.dll

windows7-x64

1

Zorara-v2....ra.dll

windows10-2004-x64

1

Zorara-v2....re.dll

windows7-x64

1

Zorara-v2....re.dll

windows10-2004-x64

1

Microsoft....re.dll

windows7-x64

1

Microsoft....re.dll

windows10-2004-x64

1

Zorara-v2....aB.exe

windows7-x64

Zorara-v2....aB.exe

windows10-2004-x64

Zorara-v2....UI.exe

windows7-x64

1

Zorara-v2....UI.exe

windows10-2004-x64

1

Zorara-v2....Env.js

windows7-x64

3

Zorara-v2....Env.js

windows10-2004-x64

3

Resubmissions

01-02-2025 12:54

250201-p46mxavnak 10

01-02-2025 12:53

250201-p4nr4avmgl 10

Analysis

max time kernel
94s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20250129-en
resource tags

arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
submitted
01-02-2025 12:54

Sharing

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

Zorara-v2.4.34-x64.zip

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Zorara-v2.4.34-x64.zip

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Zorara-v2.4.34-x64/Zorara.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Zorara-v2.4.34-x64/Zorara.dll

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Zorara-v2.4.34-x64/Zorara.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Zorara-v2.4.34-x64/Zorara.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Microsoft.CognitiveServices.Speech.core.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Microsoft.CognitiveServices.Speech.core.dll

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Zorara-v2.4.34-x64/ZoraraB.exe

Resource

win7-20240708-en

umbral execution spyware stealer

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral10

Sample

Zorara-v2.4.34-x64/ZoraraB.exe

Resource

win10v2004-20250129-en

umbral execution spyware stealer

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral11

Sample

Zorara-v2.4.34-x64/ZoraraUI.exe

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Zorara-v2.4.34-x64/ZoraraUI.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Zorara-v2.4.34-x64/scripts/UNCCheckEnv.js

Resource

win7-20241010-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

Zorara-v2.4.34-x64/scripts/UNCCheckEnv.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

Zorara-v2.4.34-x64/ZoraraUI.exe
Size

95KB
MD5

38246fb0d91772bb188b74956fcac653
SHA1

5b513501576bfd408c002bc7e3937222bd5880da
SHA256

5467a08450f3330e5aecfcac90b7e2f6005b7031b2e900c6080e894ff435223a
SHA512

66c2db8045386a2e3cf43cd56c9fc72d34108a4092fec0ef83c4817a6e2484ddde4d3366228532cbe60bff02d6e28b6c7354c749db955de236396dc29116251a
SSDEEP

1536:htOb8p1vRzSfcuafx2WR42zxMVY6dTPrvWa5riimh3VuM/APHV5y6SlSW8lXR:hEbfWytdTPrvWAPuw7Pby6S+lXR

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\Zorara-v2.4.34-x64\ZoraraUI.exe
"C:\Users\Admin\AppData\Local\Temp\Zorara-v2.4.34-x64\ZoraraUI.exe"
1⤵
PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2856-0-0x00007FFD5C693000-0x00007FFD5C695000-memory.dmp

Filesize
8KB

Download
memory/2856-1-0x000001F4E9C30000-0x000001F4E9C4C000-memory.dmp

Filesize
112KB

Download

© 2018-2025

Terms | Privacy