Resubmissions

25/07/2024, 16:27

240725-tx2sla1dql 7

25/07/2024, 16:25

240725-twydsavalg 6

25/07/2024, 16:14

240725-tp3d6azfjj 7

25/07/2024, 16:14

240725-tpqelazeqq 3

25/07/2024, 16:11

240725-tmyyyszcrk 7

General

  • Target

    Solara.zip

  • Size

    437KB

  • Sample

    240725-tp3d6azfjj

  • MD5

    eee58d3ce8e078342f627cfd2b320ad5

  • SHA1

    a68713e1a666805f26c7a14f542ba94ef136451d

  • SHA256

    17f44fc5b9874ac2e33e2c62ae1fd35938c978540bd5f184e5f06c039f3cfca7

  • SHA512

    456c030ab726a2b609e825b02a7da457f01872dbe3d7d887acd26e72659f556a7d8dbf109d03b8da739297198a174f37a774bbdea5be54377c93df0d640447f0

  • SSDEEP

    6144:Z/6DLe6398LCFDEVUgFtiqIOLxitBanEBakkBHn8qbLkUNtrIsIF4eWhl8JC9ujh:ZC/Z98LeDE+QIOLYBaE0HfcUgZuGOqV

Score
7/10

Malware Config

Targets

    • Target

      Solara.zip

    • Size

      437KB

    • MD5

      eee58d3ce8e078342f627cfd2b320ad5

    • SHA1

      a68713e1a666805f26c7a14f542ba94ef136451d

    • SHA256

      17f44fc5b9874ac2e33e2c62ae1fd35938c978540bd5f184e5f06c039f3cfca7

    • SHA512

      456c030ab726a2b609e825b02a7da457f01872dbe3d7d887acd26e72659f556a7d8dbf109d03b8da739297198a174f37a774bbdea5be54377c93df0d640447f0

    • SSDEEP

      6144:Z/6DLe6398LCFDEVUgFtiqIOLxitBanEBakkBHn8qbLkUNtrIsIF4eWhl8JC9ujh:ZC/Z98LeDE+QIOLYBaE0HfcUgZuGOqV

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks