General

  • Target

    Solaris.zip

  • Size

    28.4MB

  • MD5

    15dbe34790f41078a34cd076e043bc8c

  • SHA1

    31e0065cfdc71061d8cb8248a56185d317728d8d

  • SHA256

    c2e0d1bfc92113b8482c63b7b40acce9531c72c2f8d16f6fb52a997efd773b26

  • SHA512

    c3b48aa21c94ebc9c8d905dbdd0ef91d63d4ce56b4391f278d2819d50f42fe0ade5fb6d94bbce36012dd8a1d6e360ca59d625ee76fece42e9500506bd166e166

  • SSDEEP

    786432:rVbe9JYsPN/mUZerH2VxDGkkEEaiAumIbf+YazhFf8KTNOcOSUS7VuZ:RbeN+UZsH2VxCkCSsA7OcOSb7VuZ

Score
10/10

Malware Config

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Solaris.zip
    .zip
  • enviorment/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • enviorment/Monaco/Monaco.html
    .js
  • enviorment/Monaco/debug.log
  • enviorment/Monaco/vs/MonacoNet.dll
    .dll windows:6 windows x86 arch:x86

    785d680cbd472fae503fd72ce14d28cb


    Headers

    Imports

    Sections

  • enviorment/Monaco/vs/base/worker/workerMain.js
    .js
  • enviorment/Monaco/vs/basic-languages/lua/lua.js
  • enviorment/Monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • enviorment/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • enviorment/Monaco/vs/editor/editor.main.css
  • enviorment/Monaco/vs/editor/editor.main.js
    .js
  • enviorment/Monaco/vs/editor/editor.main.nls.de.js
  • enviorment/Monaco/vs/editor/editor.main.nls.es.js
  • enviorment/Monaco/vs/editor/editor.main.nls.fr.js
  • enviorment/Monaco/vs/editor/editor.main.nls.it.js
  • enviorment/Monaco/vs/editor/editor.main.nls.ja.js
  • enviorment/Monaco/vs/editor/editor.main.nls.js
  • enviorment/Monaco/vs/editor/editor.main.nls.ko.js
  • enviorment/Monaco/vs/editor/editor.main.nls.ru.js
  • enviorment/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • enviorment/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • enviorment/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • enviorment/Monaco/vs/loader.js
    .js
  • enviorment/Siticone.UI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • enviorment/System.ClientModel.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • enviorment/System.Memory.Data.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • enviorment/System.Memory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • enviorment/System.Threading.Tasks.Extensions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • enviorment/UIRemake.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • enviorment/UIRemake.exe.config
  • enviorment/UIRemake.pdb
  • enviorment/Wave.dll
    .dll windows:6 windows x64 arch:x64

    5f1988dd053a64d4ce09004bcc3d1a55


    Headers

    Imports

    Sections

  • enviorment/dxcompiler.dll
    .dll windows:10 windows x64 arch:x64

    86379d9f4693f2aa059197611ab2ffc7


    Headers

    Imports

    Exports

    Sections

  • enviorment/dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • enviorment/mainslr.dll
    .dll windows:6 windows x64 arch:x64

    274c98bf122b5a63d8305e17d0e1536c


    Headers

    Imports

    Sections

  • enviorment/read.txt
  • enviorment/textword.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • enviorment/websocket-sharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • enviorment/workspace/.tests/appendfile.txt
  • enviorment/workspace/.tests/getcustomasset.txt
  • enviorment/workspace/.tests/isfile.txt
  • enviorment/workspace/.tests/listfiles/test_1.txt
  • enviorment/workspace/.tests/listfiles/test_2.txt
  • enviorment/workspace/.tests/loadfile.txt
  • enviorment/workspace/.tests/readfile.txt
  • enviorment/workspace/.tests/writefile.txt
  • enviorment/workspace/IY_FE.iy