General
-
Target
SolaraBootstrapper.exe
-
Size
7.4MB
-
Sample
240623-txlfls1akr
-
MD5
05a769c21aa98656cd45c0a1bf2dc7c0
-
SHA1
8113599abcb61beeee1ee0e629e5132f082ac76c
-
SHA256
60f2a0752a9fabcaec044ab16a7ec61e37bd95b229236f75725ac11721aef8f0
-
SHA512
9efb627f919f02c4fb2989f66c8a30c3e4e9ce8ea2eaa4b525d29978643db6cf4ef425b8be5766c06d618b6d6b0fa4c5a3fdd5742c2b95a41c0b1f26e76b6a22
-
SSDEEP
98304:dSeYgZhUd6OshoKyDvuIYc5AhV+gEc4kZvRLoI0EJfNA3zCUTVv9JT1sOBN3o1pz:drYS6cOshoKMuIkhVastRL5Di3u01D76
Behavioral task
behavioral1
Sample
SolaraBootstrapper.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
SolaraBootstrapper.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
SolaraBootstrapper.exe
-
Size
7.4MB
-
MD5
05a769c21aa98656cd45c0a1bf2dc7c0
-
SHA1
8113599abcb61beeee1ee0e629e5132f082ac76c
-
SHA256
60f2a0752a9fabcaec044ab16a7ec61e37bd95b229236f75725ac11721aef8f0
-
SHA512
9efb627f919f02c4fb2989f66c8a30c3e4e9ce8ea2eaa4b525d29978643db6cf4ef425b8be5766c06d618b6d6b0fa4c5a3fdd5742c2b95a41c0b1f26e76b6a22
-
SSDEEP
98304:dSeYgZhUd6OshoKyDvuIYc5AhV+gEc4kZvRLoI0EJfNA3zCUTVv9JT1sOBN3o1pz:drYS6cOshoKMuIkhVastRL5Di3u01D76
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL
-
Hide Artifacts: Hidden Files and Directories
-