Overview

overview

8

Static

static

3

Launcher.bat

windows10-2004-x64

8

lua51.dll

windows10-2004-x64

3

luajit.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Solara.zip
  • Size 460KB
  • Sample240608-rxyd3add66
  • SHA256 11202449315d0f2edb567c5f5e3e4bd403ae0985574344ea8ddf474c1b1fb440
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Targets

    • Target
      Launcher.bat
    • Size 724B
    • SHA256 f1ed443faa01092320e04e0231327bd59c6df7344ad0f46ca4885d28aa2afd60
    • MD5 SHA1 SHA512
    Score
    8/10

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1
    • Target
      lua51.dll
    • Size 592KB
    • SHA256 ff976f6e965e3793e278fa9bf5e80b9b226a0b3932b9da764bffc8e41e6cdb60
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral2
    • Target
      luajit.exe
    • Size 89KB
    • SHA256 1cf20b8449ea84c684822a5e8ab3672213072db8267061537d1ce4ec2c30c42a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral3

MITRE ATT&CK Enterprise v15

Tasks