General

  • Target

    SolaraBootstrapper.exe

  • Size

    7.4MB

  • Sample

    240623-txlfls1akr

  • MD5

    05a769c21aa98656cd45c0a1bf2dc7c0

  • SHA1

    8113599abcb61beeee1ee0e629e5132f082ac76c

  • SHA256

    60f2a0752a9fabcaec044ab16a7ec61e37bd95b229236f75725ac11721aef8f0

  • SHA512

    9efb627f919f02c4fb2989f66c8a30c3e4e9ce8ea2eaa4b525d29978643db6cf4ef425b8be5766c06d618b6d6b0fa4c5a3fdd5742c2b95a41c0b1f26e76b6a22

  • SSDEEP

    98304:dSeYgZhUd6OshoKyDvuIYc5AhV+gEc4kZvRLoI0EJfNA3zCUTVv9JT1sOBN3o1pz:drYS6cOshoKMuIkhVastRL5Di3u01D76

Malware Config

Targets

    • Target

      SolaraBootstrapper.exe

    • Size

      7.4MB

    • MD5

      05a769c21aa98656cd45c0a1bf2dc7c0

    • SHA1

      8113599abcb61beeee1ee0e629e5132f082ac76c

    • SHA256

      60f2a0752a9fabcaec044ab16a7ec61e37bd95b229236f75725ac11721aef8f0

    • SHA512

      9efb627f919f02c4fb2989f66c8a30c3e4e9ce8ea2eaa4b525d29978643db6cf4ef425b8be5766c06d618b6d6b0fa4c5a3fdd5742c2b95a41c0b1f26e76b6a22

    • SSDEEP

      98304:dSeYgZhUd6OshoKyDvuIYc5AhV+gEc4kZvRLoI0EJfNA3zCUTVv9JT1sOBN3o1pz:drYS6cOshoKMuIkhVastRL5Di3u01D76

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Hide Artifacts: Hidden Files and Directories

MITRE ATT&CK Enterprise v15

Tasks