General

  • Target

    SolarWinds-FT-Solar-PuTTY.zip

  • Size

    1.8MB

  • MD5

    7b0b0bc87e6166b4c70f4be39dfd21d4

  • SHA1

    10dd2f36eb3a6fc9f75eab3db47b82d5dc2c4b04

  • SHA256

    3e7f343236ce85e6e02ce18dc17ae241ed53e35c302648e010b02f42a22c8499

  • SHA512

    7257b313627f48c845f492fe59771665e081fc68bd665be991308b8db744a211ed158f4f51691253dcc3e5bf5abc2859db05652d83a8b07ae9e42b12f9b77bbe

  • SSDEEP

    49152:b3TWjqO8YxMG663FC1fLtdZbsJfAc2ywrGm:7TWMYx/FC1zXBsgrGm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • SolarWinds-FT-Solar-PuTTY.zip
    .zip
  • Solar-PuTTY.exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $_2_/ChromeTabs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/CommandLine.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/CommonServiceLocator.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/GalaSoft.MvvmLight.Extras.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/GalaSoft.MvvmLight.Platform.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/GalaSoft.MvvmLight.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/HtmlAgilityPack.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/Solar-PuTTY.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/Solar-PuTTY.exe.config
  • $_2_/Solar-Putty-DelayRunner.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/Solar-Putty-DelayRunner.exe.config
    .xml
  • $_2_/System.Console.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/System.Reflection.TypeExtensions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/System.Windows.Interactivity.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/pageant.exe
    .exe windows:6 windows x64 arch:x64

    355b1b2a5e5822f3766a6d433f19c4db


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/putty.exe
    .exe windows:6 windows x64 arch:x64

    896ce5b0ff6154904c8b6537b0db7991


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/puttygen.exe
    .exe windows:6 windows x64 arch:x64

    d256cae1b0faaf20ca769b9b85c49ca6


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/solar-putty.json