SolaraB[.]zip | Triage™

General

Target
SolaraB.zip
Size 5KB
Sample240526-vsblaadg2s
SHA256 2510be907ec476e8375ac7b5431536ae9a32bf99fe77ab695a5100852b111b96
MD5 4ec8143b6dbe27870cf8333711ff5096
SHA1 693d467ebec348469011ffef1bd370b113653147
SHA512 b513d2b9c63d999ccf459cea625bfdc481e44f0f3222996182a0d0d89fdb97ed754b927c7a429e43b96f13d2fc73e2860edca78b162a41101ae97e1a0f4e054e
SSDEEP 96:Kb43b11j3vs+ieHBgcCXhzWYQ1NJGQ7S8SnV8xT/KiFlg5YNwMHv5F:Kb4rEKhgcghDY4Q7WV8t/VG1o
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SolaraB/Solara/SolaraBootstrapper.exe

File Explorer

SolaraB.zip

.zip 5KB
SolaraB/Solara/SolaraBootstrapper.exe

.exe 13KB

SolaraB.zip

SHA256 2510be907ec476e8375ac7b5431536ae9a32bf99fe77ab695a5100852b111b96
MD5 4ec8143b6dbe27870cf8333711ff5096
SHA1 693d467ebec348469011ffef1bd370b113653147
SHA512 b513d2b9c63d999ccf459cea625bfdc481e44f0f3222996182a0d0d89fdb97ed754b927c7a429e43b96f13d2fc73e2860edca78b162a41101ae97e1a0f4e054e
SSDEEP 96:Kb43b11j3vs+ieHBgcCXhzWYQ1NJGQ7S8SnV8xT/KiFlg5YNwMHv5F:Kb4rEKhgcghDY4Q7WV8t/VG1o
MD5 SHA1 SHA512 SSDEEP

SolaraB/Solara/SolaraBootstrapper.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a7fecfc225dfdd4e14dcd4d1b4ba1b9f8e4d1984f1cdd8cda3a9987e5d53c239
MD5 6557bd5240397f026e675afb78544a26
SHA1 839e683bf68703d373b6eac246f19386bb181713
SHA512 f2399d34898a4c0c201372d2dd084ee66a66a1c3eae949e568421fe7edada697468ef81f4fcab2afd61eaf97bcb98d6ade2d97295e2f674e93116d142e892e97
SSDEEP 192:konexQO0FoAWyEfJkVIaqaLHmr/XKT0ifnTJ1jvVXctNjA:HnexHAWyEfJoIaqayzKAifd1LVEj
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

18834

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Ashtin\Desktop\WTF\SolaraBootstrapper\SolaraBootstrapper\obj\Debug\SolaraBootstrapper.pdb

SolaraB.zip

SolaraB/Solara/SolaraBootstrapper.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

SolaraB.zip

SolaraB/Solara/SolaraBootstrapper.exe

mscoree

dotnet