Overview

overview

10

Static

static

9

Sol/SolarB.exe

windows7-x64

10

Sol/SolarB.exe

windows10-2004-x64

10

$TEMP/Cd

windows7-x64

1

$TEMP/Cd

windows10-2004-x64

1

$TEMP/Chi

windows7-x64

1

$TEMP/Chi

windows10-2004-x64

1

$TEMP/Complaints

windows7-x64

1

$TEMP/Complaints

windows10-2004-x64

1

$TEMP/Cosmetic

windows7-x64

1

$TEMP/Cosmetic

windows10-2004-x64

1

$TEMP/Dash

windows7-x64

1

$TEMP/Dash

windows10-2004-x64

1

$TEMP/Efficiently

windows7-x64

1

$TEMP/Efficiently

windows10-2004-x64

1

$TEMP/Emphasis

windows7-x64

1

$TEMP/Emphasis

windows10-2004-x64

1

$TEMP/Enjoyed

windows7-x64

1

$TEMP/Enjoyed

windows10-2004-x64

1

$TEMP/Event

windows7-x64

1

$TEMP/Event

windows10-2004-x64

1

$TEMP/Flights

windows7-x64

1

$TEMP/Flights

windows10-2004-x64

1

$TEMP/Fragrances

windows7-x64

1

$TEMP/Fragrances

windows10-2004-x64

1

$TEMP/Granted

windows7-x64

1

$TEMP/Granted

windows10-2004-x64

1

$TEMP/Graph

windows7-x64

1

$TEMP/Graph

windows10-2004-x64

1

$TEMP/He

windows7-x64

1

$TEMP/He

windows10-2004-x64

1

$TEMP/Healing

windows7-x64

1

$TEMP/Healing

windows10-2004-x64

1

Analysis

  • max time kernel
    143s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-06-2024 13:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $TEMP/He

  • Size

    27KB

  • MD5

    d6851f3beb47f41e097e6dbce33c7248

  • SHA1

    157d611b39d5ad7ff4251276e3c65a2cc48b6fb3

  • SHA256

    0ce6cb73e663e80c83bed15b2516061be052af171461d089a9c9442bbfce5b2f

  • SHA512

    5400d282364aee85beeb3d970c6c8e1c3dca0dc3d74efb5626a476d1f87b1a85c6bae5473b094759a0dbdc7b43d484397bf82b3f2c642ed6f1c9adccbb6a80b5

  • SSDEEP

    768:ocBJQkJworOYQ7ri2paDWah0cGcEfbzklXSZU7SI5:ocP9MTTAD/HAfbwlXSZNI5

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\$TEMP\He
    1⤵
      PID:4908
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4028 --field-trial-handle=2264,i,15001568551143786084,90255922961447677,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:1028

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads