Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Solara.dll

  • Size

    6.6MB

  • Sample

    240509-sdjl8sag38

  • MD5

    110e9512db3d6a513d94db3729919c0d

  • SHA1

    255dcd16391adea11a8fb06dbe6ea4b5dd8afb09

  • SHA256

    d4879d299553da0777a1ed4de8e5d77f89c493975133723529cd45891a278fa3

  • SHA512

    687f415b2a934de6fb82a740b737b77a4683ab6da914dddf67eb28006df8f8cb695b4011a13d16a1df247f83cdf04f8f979345ae098d3ccdc44d1e55fecae5bf

  • SSDEEP

    98304:MRzLN6+Wb8g+p9zZzyG74bajZ8XN33VMiBDeUaN7OaM2U/MwfGl8torJr7IX/1rJ:MXASdzyG74bajZGy+uNfa5el8tEPI1rJ

Malware Config

Targets

    • Target

      Solara.dll

    • Size

      6.6MB

    • MD5

      110e9512db3d6a513d94db3729919c0d

    • SHA1

      255dcd16391adea11a8fb06dbe6ea4b5dd8afb09

    • SHA256

      d4879d299553da0777a1ed4de8e5d77f89c493975133723529cd45891a278fa3

    • SHA512

      687f415b2a934de6fb82a740b737b77a4683ab6da914dddf67eb28006df8f8cb695b4011a13d16a1df247f83cdf04f8f979345ae098d3ccdc44d1e55fecae5bf

    • SSDEEP

      98304:MRzLN6+Wb8g+p9zZzyG74bajZ8XN33VMiBDeUaN7OaM2U/MwfGl8torJr7IX/1rJ:MXASdzyG74bajZGy+uNfa5el8tEPI1rJ

    • Downloads MZ/PE file

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks