Overview
overview
9Static
static
3unrattedsolara.zip
windows7-x64
1unrattedsolara.zip
windows10-2004-x64
5unrattedso...er.exe
windows7-x64
7unrattedso...er.exe
windows10-2004-x64
9unrattedso...ttwizz
windows7-x64
3unrattedso...ttwizz
windows10-2004-x64
3unrattedso...GS.dat
windows7-x64
3unrattedso...GS.dat
windows10-2004-x64
3unrattedso..._FE.iy
windows7-x64
3unrattedso..._FE.iy
windows10-2004-x64
3unrattedso...ttwizz
windows7-x64
3unrattedso...ttwizz
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
unrattedsolara.zip
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
unrattedsolara.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
unrattedsolara/SolaraB/Solara/SolaraBootstrapper.exe
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
unrattedsolara/SolaraB/Solara/SolaraBootstrapper.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
unrattedsolara/SolaraB/Solara/workspace/2862098693.ttwizz
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
unrattedsolara/SolaraB/Solara/workspace/2862098693.ttwizz
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
unrattedsolara/SolaraB/Solara/workspace/IC3_ESP_SETTINGS.dat
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
unrattedsolara/SolaraB/Solara/workspace/IC3_ESP_SETTINGS.dat
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
unrattedsolara/SolaraB/Solara/workspace/IY_FE.iy
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
unrattedsolara/SolaraB/Solara/workspace/IY_FE.iy
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
unrattedsolara/SolaraB/Solara/workspace/UISettings.ttwizz
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
unrattedsolara/SolaraB/Solara/workspace/UISettings.ttwizz
Resource
win10v2004-20240508-en
General
-
Target
unrattedsolara.zip
-
Size
278KB
-
MD5
9921e4cf997bfb4b00ce059bfc64783e
-
SHA1
200490e774f35dcdf81bb5e06c1dbf7afbd9db62
-
SHA256
18b1e74e323a370889dbbcf4be3188eaaf9dd4355fad97397a81af98fef1db81
-
SHA512
42b9b93099e77e4c32c644a2401e25c5060621161340e55f177187f25f8e2fe83c07c033bfb0e0f35a904080ca0fa992c406b76f8c4124f781fc6045b2ece91c
-
SSDEEP
6144:r0SIclkbfG94QqH2bJ+VHJalgqxmjWOiDbMGE:rIcWa4QPbJ+zalZIWOiDC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/unrattedsolara/SolaraB/Solara/SolaraBootstrapper.exe
Files
-
unrattedsolara.zip.zip
-
unrattedsolara/SolaraB/Solara/SolaraBootstrapper.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
unrattedsolara/SolaraB/Solara/workspace/2862098693.ttwizz
-
unrattedsolara/SolaraB/Solara/workspace/IC3_ESP_SETTINGS.dat
-
unrattedsolara/SolaraB/Solara/workspace/IY_FE.iy
-
unrattedsolara/SolaraB/Solara/workspace/UISettings.ttwizz