Overview
overview
8Static
static
7trojan-lea...um.exe
windows10-1703-x64
8trojan-lea...um.exe
windows7-x64
8trojan-lea...um.exe
windows10-2004-x64
8trojan-lea....0.z01
windows10-1703-x64
3trojan-lea....0.z01
windows7-x64
3trojan-lea....0.z01
windows10-2004-x64
trojan-lea....0.z02
windows10-1703-x64
3trojan-lea....0.z02
windows7-x64
3trojan-lea....0.z02
windows10-2004-x64
3trojan-lea....0.zip
windows10-1703-x64
1trojan-lea....0.zip
windows7-x64
1trojan-lea....0.zip
windows10-2004-x64
trojan-lea....0.z01
windows10-1703-x64
3trojan-lea....0.z01
windows7-x64
3trojan-lea....0.z01
windows10-2004-x64
3trojan-lea....0.z02
windows10-1703-x64
3trojan-lea....0.z02
windows7-x64
3trojan-lea....0.z02
windows10-2004-x64
trojan-lea....0.z03
windows10-1703-x64
3trojan-lea....0.z03
windows7-x64
3trojan-lea....0.z03
windows10-2004-x64
trojan-lea....0.zip
windows10-1703-x64
1trojan-lea....0.zip
windows7-x64
1trojan-lea....0.zip
windows10-2004-x64
trojan-lea...ty.exe
windows10-1703-x64
1trojan-lea...ty.exe
windows7-x64
1trojan-lea...ty.exe
windows10-2004-x64
1trojan-lea...n).rar
windows10-1703-x64
3trojan-lea...n).rar
windows7-x64
3trojan-lea...n).rar
windows10-2004-x64
3Resubmissions
09-05-2023 19:22
230509-x3fn4adg58 1009-05-2023 19:14
230509-xxsrgaff7x 1009-05-2023 19:14
230509-xxr5yadg42 709-05-2023 19:14
230509-xxrt6sff7w 809-05-2023 19:14
230509-xxrjeaff7v 809-05-2023 19:14
230509-xxqxwadg39 709-05-2023 19:14
230509-xxql4sff7t 1009-05-2023 19:14
230509-xxqbcadg38 709-05-2023 19:10
230509-xvl6xadf64 10Analysis
-
max time kernel
138s -
max time network
404s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
09-05-2023 19:14
Behavioral task
behavioral1
Sample
trojan-leaks-main/Ruthenium/Ruthenium.exe
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
trojan-leaks-main/Ruthenium/Ruthenium.exe
Resource
win7-20230220-en
Behavioral task
behavioral3
Sample
trojan-leaks-main/Ruthenium/Ruthenium.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
trojan-leaks-main/Solaris 2.0.z01
Resource
win10-20230220-en
Behavioral task
behavioral5
Sample
trojan-leaks-main/Solaris 2.0.z01
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
trojan-leaks-main/Solaris 2.0.z01
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
trojan-leaks-main/Solaris 2.0.z02
Resource
win10-20230220-en
Behavioral task
behavioral8
Sample
trojan-leaks-main/Solaris 2.0.z02
Resource
win7-20230220-en
Behavioral task
behavioral9
Sample
trojan-leaks-main/Solaris 2.0.z02
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
trojan-leaks-main/Solaris 2.0.zip
Resource
win10-20230220-en
Behavioral task
behavioral11
Sample
trojan-leaks-main/Solaris 2.0.zip
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
trojan-leaks-main/Solaris 2.0.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
trojan-leaks-main/Solaris2.0.z01
Resource
win10-20230220-en
Behavioral task
behavioral14
Sample
trojan-leaks-main/Solaris2.0.z01
Resource
win7-20230220-en
Behavioral task
behavioral15
Sample
trojan-leaks-main/Solaris2.0.z01
Resource
win10v2004-20230220-en
Behavioral task
behavioral16
Sample
trojan-leaks-main/Solaris2.0.z02
Resource
win10-20230220-en
Behavioral task
behavioral17
Sample
trojan-leaks-main/Solaris2.0.z02
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
trojan-leaks-main/Solaris2.0.z02
Resource
win10v2004-20230221-en
Behavioral task
behavioral19
Sample
trojan-leaks-main/Solaris2.0.z03
Resource
win10-20230220-en
Behavioral task
behavioral20
Sample
trojan-leaks-main/Solaris2.0.z03
Resource
win7-20230220-en
Behavioral task
behavioral21
Sample
trojan-leaks-main/Solaris2.0.z03
Resource
win10v2004-20230220-en
Behavioral task
behavioral22
Sample
trojan-leaks-main/Solaris2.0.zip
Resource
win10-20230220-en
Behavioral task
behavioral23
Sample
trojan-leaks-main/Solaris2.0.zip
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
trojan-leaks-main/Solaris2.0.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
trojan-leaks-main/Suffocate-safety.exe
Resource
win10-20230220-en
Behavioral task
behavioral26
Sample
trojan-leaks-main/Suffocate-safety.exe
Resource
win7-20230220-en
Behavioral task
behavioral27
Sample
trojan-leaks-main/Suffocate-safety.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral28
Sample
trojan-leaks-main/TheEchoOfFear (Special Edition).rar
Resource
win10-20230220-en
Behavioral task
behavioral29
Sample
trojan-leaks-main/TheEchoOfFear (Special Edition).rar
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
trojan-leaks-main/TheEchoOfFear (Special Edition).rar
Resource
win10v2004-20230220-en
General
-
Target
trojan-leaks-main/Solaris 2.0.z02
-
Size
24.0MB
-
MD5
fddd853a10553794dfe98ced1c6c70c0
-
SHA1
0bc2e8fb07d61ad6dde77c4f2f824ac780e3b599
-
SHA256
e73bf0a50b65481e797bd551b2a9266bbf131c7d0e6a62d6c6dff3c929a3925b
-
SHA512
02c355609adefcd2afcf0e5ceee9e89658b1939d8f3de896c8366af9b4e43a13300269ca569eea727584c68aae88573023163eb24e95a9d9dc7e59bf2f5b0128
-
SSDEEP
393216:JY5k3DCsjBdBRBosyg1/XVV1z/DgwvWXW+SCmBZmqQe27coscMslu5TjPpXLj5mc:JYiZB5h/31z/xRbbBaj7wcMslu5Tzd5X
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 4360 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\trojan-leaks-main\Solaris 2.0.z02"1⤵
- Modifies registry class
PID:3508
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4360