Overview

overview

8

Static

static

3

Solara_Updater.exe

windows7-x64

7

Solara_Updater.exe

windows10-2004-x64

8

Resubmissions

18/05/2024, 01:45

240518-b6fbvaee4t 8

17/05/2024, 14:42

240517-r3d8dace23 8

15/05/2024, 18:33

240515-w7msjadg3z 8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Solara_Updater.exe

  • Size

    14.3MB

  • Sample

    240515-w7msjadg3z

  • MD5

    0ac2a69ee4ce6071a0fddd453ec9c780

  • SHA1

    2c9e6f1183aa56dd08d1e49345c6d7a5094c13f7

  • SHA256

    2d52c1f4a95db6bcad65d971a218e7b3b18a35e404e43fb53f340f635397e216

  • SHA512

    f4f5c54303ef9eaae6e05844c6ca3c6f12ad7c259a71dc1f7e2a8bd8a05a5ba51459eb28905fcc25a1bcac6ebba66581b31abefad53ff5a56b37fee9b6bfe796

  • SSDEEP

    393216:D3BAnExX5UULTyEg7AhubVYxhSYkm8EGZBeci0ldAVlI:DbxLTyzAhs0DVGZBe50A

Score
8/10
executionspywarestealer

Malware Config

Targets

    • Target

      Solara_Updater.exe

    • Size

      14.3MB

    • MD5

      0ac2a69ee4ce6071a0fddd453ec9c780

    • SHA1

      2c9e6f1183aa56dd08d1e49345c6d7a5094c13f7

    • SHA256

      2d52c1f4a95db6bcad65d971a218e7b3b18a35e404e43fb53f340f635397e216

    • SHA512

      f4f5c54303ef9eaae6e05844c6ca3c6f12ad7c259a71dc1f7e2a8bd8a05a5ba51459eb28905fcc25a1bcac6ebba66581b31abefad53ff5a56b37fee9b6bfe796

    • SSDEEP

      393216:D3BAnExX5UULTyEg7AhubVYxhSYkm8EGZBeci0ldAVlI:DbxLTyzAhs0DVGZBe50A

    Score
    8/10
    executionspywarestealer

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks