General
-
Target
61085e8dfb80e7de7fba6b83066253f6479fb81b4bbc0b4c4b18477c035bf92c.lnk
-
Size
2KB
-
Sample
240212-e585babg96
-
MD5
572b88eb24399ecb796a86dfe7f9fc59
-
SHA1
65db9c2f7228b938744d25035de0db78af615c14
-
SHA256
61085e8dfb80e7de7fba6b83066253f6479fb81b4bbc0b4c4b18477c035bf92c
-
SHA512
0381061daff51e7ff875248838710ee3744849ddf4a3557f8ed71aee6ad524ebaacb4bc388c2feb3bd2d1ec257fefbb6a52e8bb9cac68c6b808936979df4bf9e
Static task
static1
Behavioral task
behavioral1
Sample
61085e8dfb80e7de7fba6b83066253f6479fb81b4bbc0b4c4b18477c035bf92c.lnk
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
61085e8dfb80e7de7fba6b83066253f6479fb81b4bbc0b4c4b18477c035bf92c.lnk
Resource
win10v2004-20231215-en
Malware Config
Extracted
https://mw-solaris.com/solaris.hta
Targets
-
-
Target
61085e8dfb80e7de7fba6b83066253f6479fb81b4bbc0b4c4b18477c035bf92c.lnk
-
Size
2KB
-
MD5
572b88eb24399ecb796a86dfe7f9fc59
-
SHA1
65db9c2f7228b938744d25035de0db78af615c14
-
SHA256
61085e8dfb80e7de7fba6b83066253f6479fb81b4bbc0b4c4b18477c035bf92c
-
SHA512
0381061daff51e7ff875248838710ee3744849ddf4a3557f8ed71aee6ad524ebaacb4bc388c2feb3bd2d1ec257fefbb6a52e8bb9cac68c6b808936979df4bf9e
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-