General

  • Target

    SolaraV3.rar

  • Size

    11.1MB

  • MD5

    1ac18b897062ff8d9069f4ce33585550

  • SHA1

    cea50e978b862c6134f9f5688d8465f7332b21cb

  • SHA256

    bb0ef7ce5c818ed41f4d00402c14eb714c86f130215a7806cb57e6dab4c2f3e1

  • SHA512

    f37bcf3558ab67b187bd6caa756f1788081e9f7088f582c67ed4c00b61383e46ece85b35824e7f47f9653ad47839bacda5ae200a7a88f5a38acb5382b56c7c28

  • SSDEEP

    196608:2AmbbcSQ9zLPwxFxEfUMEtZjMe2zw6cmhgbfHTy5/KTBCTOMzDwT5PcxGW3:kbY9vPix5DZjPH65hgbfzq2HM4Txcxh3

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • SolaraV3.rar
    .rar
  • README.txt
  • Solara.dll
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Solara.json
  • Solara.runtimeconfig.json
  • SolaraV3.exe
    .exe windows:5 windows x64 arch:x64

    f4f2e2b03fe5666a721620fcea3aea9b


    Code Sign

    Headers

    Imports

    Sections

  • ��'���.pyc
  • autoexec.lnk
    .lnk
  • bin/SolaraAuth.dll
    .dll windows:6 windows x86 arch:x86

    1e43248867d3aa00b36c87eacf058544


    Headers

    Imports

    Exports

    Sections

  • scripts/saved_tabs/tab_1
  • workspace.lnk
    .lnk