Extracted

• • Target

    SolaraB3.exe

  • Size

    14.2MB

  • MD5

    624a4bb9e224dc7ab6fd7b0d3cb6ab23

  • SHA1

    90953409014197c02cfd5830cc19413e8f93bf4c

  • SHA256

    a0d4650e1bddc92d6057794c28bfc483d43f19943867aaf72cc79c779a4c69af

  • SHA512

    562c2879a22fcf3858f635903ac202250fbfc8142b05dc297ed20bfb20abdd04f65cac3e3cbd23b8298116ec437977d089f958c65c6f13439a9b96e322284b77

  • SSDEEP

    196608:Fw60eLZLRRXSiFTzgzCIoT8c/aaA8e8IVqbYs84JD6yaYB:Ff0eVpgyT8c/uqYsRuyaM

  Score

  10^/10

  skuldpersistencestealer

  • Skuld stealer

    An info stealer written in Go lang.

    stealerskuld

  • Adds Run key to start application

    persistence

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1