Resubmissions

10-05-2024 00:32

240510-avsmcsgc2y 10

General

  • Target

    S0lara_V2.0_WebBypass.zip

  • Size

    8.6MB

  • MD5

    38f7d120243a1d4c733119d0549cdf79

  • SHA1

    9554851b9e3733087fd1830e204669e37468ecec

  • SHA256

    96696d9c34dc08813fb92d636f7d0e31755844f320ececaa0de07a0ccd694a83

  • SHA512

    15a0569358e2c5785d80d35dbddedecd9bf6b90fca316dc6316a92c268a89fcc05441cc4779fa3a4c5b92125996a62c1a72caf331c69cff3fa0680a12584da38

  • SSDEEP

    196608:ax6g6NKDeT75jcLD+xklUrt78RBwVIU3sAFpaqVYHyKWJI:ar6My5jXOlUewVI1wcqnE

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • S0lara_V2.0_WebBypass.zip
    .zip

    Password: PG5jp6w6L

  • README.txt
  • Solara V2.0.rar
    .rar

    Password: PG5jp6w6L

  • Solara V2.0/Solara V2.0.exe
    .exe windows:6 windows x86 arch:x86

    Password: PG5jp6w6L

    627392392b169e368494353222903557


    Headers

    Imports

    Sections

  • Solara V2.0/Solara.dll
    .dll windows:6 windows x64 arch:x64

    Password: PG5jp6w6L


    Headers

    Exports

    Sections

  • Solara V2.0/Wpf.Ui.dll
    .dll windows:4 windows x86 arch:x86

    Password: PG5jp6w6L

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Solara V2.0/api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64

    Password: PG5jp6w6L


    Code Sign

    Headers

    Exports

    Sections

  • Solara V2.0/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    Password: PG5jp6w6L

    9a4ddbe07217dde8376bb7c577388155


    Headers

    Imports

    Exports

    Sections

  • Solara V2.0/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    Password: PG5jp6w6L

    01c801a34c4715440ef1f25ad689b315


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Solara V2.0/runtimes/win-arm64/native/WebView2Loader.dll
  • Solara V2.0/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:5 windows x64 arch:x64

    Password: PG5jp6w6L

    3fd78a8f50b85b627af2d0fc485b5e97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Solara V2.0/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:5 windows x86 arch:x86

    a64b009ff2c9503726050a45e231f4c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Solara V2.0/workspace/.tests/appendfile.txt
  • Solara V2.0/workspace/.tests/getcustomasset.txt
  • Solara V2.0/workspace/.tests/isfile.txt
  • Solara V2.0/workspace/.tests/listfiles/test_1.txt
  • Solara V2.0/workspace/.tests/listfiles/test_2.txt
  • Solara V2.0/workspace/.tests/loadfile.txt
  • Solara V2.0/workspace/.tests/readfile.txt
  • Solara V2.0/workspace/.tests/writefile
  • Solara V2.0/workspace/.tests/writefile.txt
  • Solara V2.0/workspace/IY_FE.iy
  • Solara V2.0/workspace/MySploit/111958650.txt