Overview

overview

7

Static

static

1

Solar-Twea....3.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Solar-Tweaks-Setup-4.3.3.exe

  • Size

    60.3MB

  • Sample

    230331-wqt6aadf4y

  • MD5

    ed4a1a4fc71c4cfd4ff37bfd00114b7b

  • SHA1

    581a8f1c303c0d592083b4649dd1819e8394efee

  • SHA256

    1c2d92a970c392e744075679363c85a95ab97a28a22ce6431fbaa206d9ac33e3

  • SHA512

    8aa009204b3723af95a2d339f8405a6462c2b2f179f544db02a35bdf095c52ae74a2af128d2facd6ca114c5a0dd1ef50b0ae785917f7e1f0d5ba02b25f8f62d0

  • SSDEEP

    1572864:aV1s9gPNzITDH7QDv2zFZJTCT6MR9L0T+woseEM:aV1sUUXcL2zfNwbnLddEM

Score
7/10
discovery

Malware Config

Targets

    • Target

      Solar-Tweaks-Setup-4.3.3.exe

    • Size

      60.3MB

    • MD5

      ed4a1a4fc71c4cfd4ff37bfd00114b7b

    • SHA1

      581a8f1c303c0d592083b4649dd1819e8394efee

    • SHA256

      1c2d92a970c392e744075679363c85a95ab97a28a22ce6431fbaa206d9ac33e3

    • SHA512

      8aa009204b3723af95a2d339f8405a6462c2b2f179f544db02a35bdf095c52ae74a2af128d2facd6ca114c5a0dd1ef50b0ae785917f7e1f0d5ba02b25f8f62d0

    • SSDEEP

      1572864:aV1s9gPNzITDH7QDv2zFZJTCT6MR9L0T+woseEM:aV1sUUXcL2zfNwbnLddEM

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Process Discovery

1
T1057

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks