Resubmissions

27-07-2024 09:50

240727-lt1r5asbnk 10

27-07-2024 09:38

240727-lmhb7stgpg 10

General

  • Target

    S0lardJIRE.zip

  • Size

    51.9MB

  • MD5

    578d560397dada5b6a990d2c4137334f

  • SHA1

    a42139ae316639aa25be1fae5efb8c1f4922412d

  • SHA256

    fbc77548e8938bbf771cae6cfa3eea095d35ddc2e0026dbe460488d06ec7cc43

  • SHA512

    d4c3f5af1d8f722e5f596727351e9e12abcb6a7e5b4bb131bd74dc6fbedae2ae792dc407222fded147acd7d9159d867c2a2ed8837aa0444dfc3a8ee642b1adbc

  • SSDEEP

    1572864:exBUasxBydhZz63jdbNG7VRYR8Xcjo5hgiyuPtw:exGzIh4jZNOvYR8Xot/uFw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • S0lardJIRE.zip
    .zip

    Password: 6868

  • ReadMe.txt
  • S0laradD.zip
    .zip

    Password: 6868

  • S0laradD/S0larD.exe
    .exe windows:5 windows x86 arch:x86

    Password: 6868

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Aruba
  • $TEMP/Boob
  • $TEMP/Branches
  • $TEMP/Comics
  • $TEMP/Computational
  • $TEMP/Del
  • $TEMP/Forget
  • $TEMP/Gore
  • $TEMP/Greensboro
  • $TEMP/Highland
  • $TEMP/Hydraulic
  • $TEMP/Hydrogen
  • $TEMP/Idol
  • $TEMP/Lambda
  • $TEMP/Newly
  • $TEMP/Opportunities
  • $TEMP/Precious
  • $TEMP/Programs
  • $TEMP/Remaining
  • $TEMP/Rochester
  • $TEMP/Servers
  • $TEMP/Services
  • $TEMP/Temporary
  • $TEMP/Threaded
  • $TEMP/Trained
  • $TEMP/Tumor
  • $TEMP/Venezuela
  • $TEMP/Wonderful
  • $TEMP/Xxx
  • $TEMP/Yukon
  • $TEMP/Zoloft
  • S0laradD/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    Password: 6868

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S0laradD/locales/locales/af.pak
  • S0laradD/locales/locales/am.pak
  • S0laradD/locales/locales/ar.pak
  • S0laradD/locales/locales/bg.pak
  • S0laradD/locales/locales/bn.pak
  • S0laradD/locales/locales/ca.pak
  • S0laradD/locales/locales/cs.pak
  • S0laradD/locales/locales/da.pak
  • S0laradD/locales/locales/de.pak
    .ps1
  • S0laradD/locales/locales/el.pak
  • S0laradD/locales/locales/en-GB.pak
  • S0laradD/locales/locales/en-US.pak
  • S0laradD/locales/locales/es-419.pak
  • S0laradD/locales/locales/es.pak
  • S0laradD/locales/locales/et.pak
  • S0laradD/locales/locales/fa.pak
  • S0laradD/locales/locales/fi.pak
  • S0laradD/locales/locales/fil.pak
  • S0laradD/locales/locales/fr.pak
  • S0laradD/locales/locales/gu.pak
  • S0laradD/locales/locales/he.pak
  • S0laradD/locales/locales/hi.pak
  • S0laradD/locales/locales/hr.pak
  • S0laradD/locales/locales/hu.pak
  • S0laradD/locales/locales/id.pak
  • S0laradD/locales/locales/it.pak
  • S0laradD/locales/locales/ja.pak
  • S0laradD/locales/locales/kn.pak
  • S0laradD/locales/locales/ko.pak
  • S0laradD/locales/locales/lt.pak
  • S0laradD/locales/locales/lv.pak
  • S0laradD/locales/locales/ml.pak
  • S0laradD/locales/locales/mr.pak
  • S0laradD/locales/locales/ms.pak
  • S0laradD/locales/locales/nb.pak
  • S0laradD/locales/locales/nl.pak
  • S0laradD/locales/locales/pl.pak
  • S0laradD/locales/locales/pt-BR.pak
  • S0laradD/locales/locales/pt-PT.pak
  • S0laradD/locales/locales/ro.pak
  • S0laradD/locales/locales/ru.pak
  • S0laradD/locales/locales/sk.pak
  • S0laradD/locales/locales/sl.pak
  • S0laradD/locales/locales/sr.pak
  • S0laradD/locales/locales/sv.pak
  • S0laradD/locales/locales/sw.pak
  • S0laradD/locales/locales/ta.pak
  • S0laradD/locales/locales/te.pak
  • S0laradD/locales/locales/th.pak
  • S0laradD/locales/locales/tr.pak
  • S0laradD/locales/locales/uk.pak
  • S0laradD/locales/locales/ur.pak
  • S0laradD/locales/locales/vi.pak
  • S0laradD/locales/locales/zh-CN.pak
  • S0laradD/locales/locales/zh-TW.pak
  • S0laradD/locales/resources/LICENSE.electron.txt
  • S0laradD/locales/resources/LICENSES.chromium.html
  • S0laradD/locales/resources/af.pak
  • S0laradD/locales/resources/am.pak
  • S0laradD/locales/resources/app.asar
  • S0laradD/locales/resources/app.asar.unpacked/node_modules/btime/binding.node
    .dll windows:6 windows x64 arch:x64

    Password: 6868

    0242ceb286e744ddd6dd8e963da637ee


    Headers

    Imports

    Exports

    Sections

  • S0laradD/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.node
    .dll windows:6 windows x64 arch:x64

    Password: 6868

    2a1b9a0a23b390c22659b30f7660d0da


    Headers

    Imports

    Exports

    Sections

  • S0laradD/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.node
    .dll windows:6 windows x64 arch:x64

    Password: 6868

    56e83fb6e818a708f7895cf9d6058c3a


    Headers

    Imports

    Exports

    Sections

  • S0laradD/locales/resources/ar.pak
  • S0laradD/locales/resources/bg.pak
  • S0laradD/locales/resources/bn.pak
  • S0laradD/locales/resources/ca.pak
  • S0laradD/locales/resources/chrome_100_percent.pak
  • S0laradD/locales/resources/chrome_200_percent.pak
  • S0laradD/locales/resources/cs.pak
  • S0laradD/locales/resources/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    Password: 6868

    dc71769f237c0a3ba38879380c54a4e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S0laradD/locales/resources/da.pak
  • S0laradD/locales/resources/de.pak
    .ps1
  • S0laradD/locales/resources/el.pak
  • S0laradD/locales/resources/en-GB.pak
  • S0laradD/locales/resources/en-US.pak
  • S0laradD/locales/resources/es-419.pak
  • S0laradD/locales/resources/es.pak
  • S0laradD/locales/resources/et.pak
  • S0laradD/locales/resources/fa.pak
  • S0laradD/locales/resources/ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    Password: 6868

    14338d2168d869b1b53d66354179e8c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S0laradD/locales/resources/fi.pak
  • S0laradD/locales/resources/fil.pak
  • S0laradD/locales/resources/fr.pak
  • S0laradD/locales/resources/gu.pak
  • S0laradD/locales/resources/he.pak
  • S0laradD/locales/resources/hi.pak
  • S0laradD/locales/resources/hr.pak
  • S0laradD/locales/resources/hu.pak
  • S0laradD/locales/resources/icudtl.dat
  • S0laradD/locales/resources/id.pak
  • S0laradD/locales/resources/it.pak
  • S0laradD/locales/resources/ja.pak
  • S0laradD/locales/resources/kn.pak
  • S0laradD/locales/resources/ko.pak
  • S0laradD/locales/resources/lt.pak
  • S0laradD/locales/resources/lv.pak
  • S0laradD/locales/resources/mkl_mc3.1.dll
    .dll windows:6 windows x64 arch:x64

    5e6d5c0dd72cf0e0075c17b32e860f2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S0laradD/locales/resources/ml.pak
  • S0laradD/locales/resources/mr.pak
  • S0laradD/locales/resources/ms.pak
  • S0laradD/locales/resources/nb.pak
  • S0laradD/locales/resources/nl.pak
  • S0laradD/locales/resources/obsidian.asar
  • S0laradD/locales/resources/pl.pak
  • S0laradD/locales/resources/pt-BR.pak
  • S0laradD/locales/resources/pt-PT.pak
  • S0laradD/locales/resources/resources.pak
  • S0laradD/locales/resources/ro.pak
  • S0laradD/locales/resources/ru.pak
  • S0laradD/locales/resources/sk.pak
  • S0laradD/locales/resources/sl.pak
  • S0laradD/locales/resources/snapshot_blob.bin
  • S0laradD/locales/resources/sr.pak
  • S0laradD/locales/resources/sv.pak
  • S0laradD/locales/resources/sw.pak
  • S0laradD/locales/resources/ta.pak
  • S0laradD/locales/resources/te.pak
  • S0laradD/locales/resources/th.pak
  • S0laradD/locales/resources/tr.pak
  • S0laradD/locales/resources/uk.pak
  • S0laradD/locales/resources/ur.pak
  • S0laradD/locales/resources/v8_context_snapshot.bin
  • S0laradD/locales/resources/vi.pak
  • S0laradD/locales/resources/vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    6d7b823ac45e01133a6ba8c35160fef1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S0laradD/locales/resources/vk_swiftshader_icd.json
  • S0laradD/locales/resources/vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S0laradD/locales/resources/zh-CN.pak
  • S0laradD/locales/resources/zh-TW.pak
  • S0laradD/locales/sl.pak
  • S0laradD/locales/sr.pak
  • S0laradD/locales/sv.pak
  • S0laradD/locales/sw.pak
  • S0laradD/locales/ta.pak
  • S0laradD/locales/te.pak
  • S0laradD/locales/th.pak