Overview

overview

9

Static

static

7

Solara/Mic...re.dll

windows10-2004-x64

1

Solara/Mic...ms.dll

windows10-2004-x64

1

Solara/Mic...pf.dll

windows10-2004-x64

1

Solara/Mon...dex.js

windows10-2004-x64

3

Solara/Mon...dex.js

windows10-2004-x64

3

Solara/Mon...ten.js

windows10-2004-x64

3

Solara/Mon...dex.js

windows10-2004-x64

3

Solara/Mon...ead.js

windows10-2004-x64

3

Solara/Mon...son.js

windows10-2004-x64

3

Solara/Mon...raw.js

windows10-2004-x64

Solara/Mon...ext.js

windows10-2004-x64

3

Solara/Mon...ded.js

windows10-2004-x64

3

Solara/Mon...dex.js

windows10-2004-x64

3

Solara/Mon...und.js

windows10-2004-x64

3

Solara/Mon...dex.js

windows10-2004-x64

3

Solara/Mon...dex.js

windows10-2004-x64

3

Solara/Mon...dex.js

windows10-2004-x64

3

Solara/Mon...dex.js

windows10-2004-x64

3

Solara/Mon...dex.js

windows10-2004-x64

3

Solara/Mon...x.html

windows10-2004-x64

3

Solara/Mon...lua.js

windows10-2004-x64

3

Solara/Mon...ain.js

windows10-2004-x64

3

Solara/Mon...nls.js

windows10-2004-x64

3

Solara/Mon...der.js

windows10-2004-x64

3

Solara/New...on.dll

windows10-2004-x64

1

Solara/Solara.dll

windows10-2004-x64

9

Solara/Solara.exe

windows10-2004-x64

1

Solara/Web...er.dll

windows10-2004-x64

1

Solara/Wpf.Ui.dll

windows10-2004-x64

1

Solara/libcurl.dll

windows10-2004-x64

1

Solara/vcr...40.dll

windows10-2004-x64

1

Solara/zlib1.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Solara.Dir.zip

  • Size

    8.1MB

  • Sample

    240802-sppbvsyhql

  • MD5

    577623eb65034cbd53313ab707fe9496

  • SHA1

    56158757e6c91999188de9059c19808c8d7c6426

  • SHA256

    803de9083266eadfe4fdd6761b97224a98877262b0c978a8cf0ac4c5e0760aa0

  • SHA512

    10d970d04904b0258cb2edfe8db19ad5399ecc908c6e2f6386f0b4e61855b233823ce6b227d2ee91ff26752adb5d3cb010742d5f5bc24faa0b93f23810bbe5ed

  • SSDEEP

    98304:EwvWdWMyHi1srW6A1jsQq6pttAq/ge8zOEKZH7k70acVLu1SqlcRDObL8lfOqwoC:8dW8mWhq7e8zxKZHzmSqYcLcTBk1F/j

Score
9/10
discoveryevasionexecutionthemidatrojan

Malware Config

Targets

    • Target

      Solara/Microsoft.Web.WebView2.Core.dll

    • Size

      488KB

    • MD5

      851fee9a41856b588847cf8272645f58

    • SHA1

      ee185a1ff257c86eb19d30a191bf0695d5ac72a1

    • SHA256

      5e7faee6b8230ca3b97ce9542b914db3abbbd1cb14fd95a39497aaad4c1094ca

    • SHA512

      cf5c70984cf33e12cf57116da1f282a5bd6433c570831c185253d13463b0b9a0b9387d4d1bf4dddab3292a5d9ba96d66b6812e9d7ebc5eb35cb96eea2741348f

    • SSDEEP

      12288:W/TcW1virB3ye+iKzORFNgeA+imQ9pRFZNIEJdIElxPrEIgcvLcglxMwCepM1STy:W/1C4I

    Score
    1/10
    behavioral1

    • Target

      Solara/Microsoft.Web.WebView2.WinForms.dll

    • Size

      37KB

    • MD5

      4cf94ffa50fd9bdc0bb93cceaede0629

    • SHA1

      3e30eca720f4c2a708ec53fd7f1ba9e778b4f95f

    • SHA256

      50b2e46c99076f6fa9c33e0a98f0fe3a2809a7c647bb509066e58f4c7685d7e6

    • SHA512

      dc400518ef2f68920d90f1ce66fbb8f4dde2294e0efeecd3d9329aa7a66e1ab53487b120e13e15f227ea51784f90208c72d7fbfa9330d9b71dd9a1a727d11f98

    • SSDEEP

      768:SNGbP6+wTftcZDgcEST3p4Jjrjh2jJFSUyauYv1JKia5/Zi/WGQKVu6bRaMBo0wx:OGm+otcZDgcEST3p4JjrjaJFSUyau01U

    Score
    1/10
    behavioral2

    • Target

      Solara/Microsoft.Web.WebView2.Wpf.dll

    • Size

      43KB

    • MD5

      34ec990ed346ec6a4f14841b12280c20

    • SHA1

      6587164274a1ae7f47bdb9d71d066b83241576f0

    • SHA256

      1e987b22cd011e4396a0805c73539586b67df172df75e3dded16a77d31850409

    • SHA512

      b565015ca4b11b79ecbc8127f1fd40c986948050f1caefdd371d34ed2136af0aabf100863dc6fd16d67e3751d44ee13835ea9bf981ac0238165749c4987d1ae0

    • SSDEEP

      768:1n/WlAKj4s0TV09797+nXDheteXBxc78OSW3Z8lcDP/ryEH0UBy4JjrD1h2j5h3E:1+msYXR3sZ8lcDP/ryEH0UBy4JjrD1aU

    Score
    1/10
    behavioral3

    • Target

      Solara/Monaco/fileaccess/index.js

    • Size

      4KB

    • MD5

      e462fb7561f6c9bccb24e62bb93889d2

    • SHA1

      1becca75907b3ae5fb7de82e0cb495ff0fc90517

    • SHA256

      ff3fc42d5f912950d1095c43c8edb8a3be63c8eee9db5ca5d39d5668f68f7b41

    • SHA512

      4e7e83e63195ad0d9d155e3d00e0dc228148c95804d817779a043abe3672087fdc9e038ede8f6510fc88cc283e3d993499cafa8083e5104ccf0360df845acb26

    • SSDEEP

      96:gFEuLu1uHsWwXphsk/9TLsvyOsSnWX+OsM+3qYsMxiT9:4EMej/ZuyEnWv+FK

    Score
    3/10
    execution
    behavioral4

    • Target

      Solara/Monaco/fileaccess/node_modules/accepts/index.js

    • Size

      5KB

    • MD5

      4fe4d2c90a2fd19d6e97443a7d24f815

    • SHA1

      282263f45f6bf80fbf43f4097d53b5b60ff1a05f

    • SHA256

      be2decbd50610e8f995c1e312ee4dd6d7c1244cfdf03ee4c4a3da68e572dada1

    • SHA512

      c795b7285cc92616a46fd1ad2d00ce65fb4b269e6b6fc35315891d119b7c25b7f4573540be0627d577123201d9cfe119c8a53f0e75a8b6ea870f8d89a130c213

    • SSDEEP

      96:oYG1MGmGHqyl8rAyBkmqFxo+uerpDWMlB8fdOGUJTit4UG9bCZhPwA:oYG1Xlqyl88yBD+uerRLD0YQ4rcZh9

    Score
    3/10
    execution
    behavioral5

    • Target

      Solara/Monaco/fileaccess/node_modules/array-flatten/array-flatten.js

    • Size

      1KB

    • MD5

      4b17fa06c54846b686b8b799e9dd253a

    • SHA1

      fc6cc30e8b8ec09eeba62bac076ed627aa3ee8d1

    • SHA256

      766ca145b6d25e3d60f352a716e8fa1876bcdf362c0767c360cf24f335bc281e

    • SHA512

      72df1668f464f6942c484155b667086bb6f83f77e826ffcd146ee045079db3334aba270bffb66cdd796d4c9308121ec2a67a404289f19914c45d9a6c15435e71

    Score
    3/10
    execution
    behavioral6

    • Target

      Solara/Monaco/fileaccess/node_modules/body-parser/index.js

    • Size

      2KB

    • MD5

      b9e991c0e57c4d5adde68a2f4f063bc7

    • SHA1

      0cb6b9eb7b310c37e5950bbcaf672943657c94b5

    • SHA256

      9c6c900e7e85fb599c62d9b9e4dfd2ea2f61d119dce5ed69ac3a8da828819241

    • SHA512

      3bbd31eed55c32435b01fe7356d39749e95f8f49222115ada841e751ad36227e6f427efdc4e8bad36d8ccd37c2e92c01fa67c24c23f52023df8c1e1be1a3b4f6

    Score
    3/10
    execution
    behavioral7

    • Target

      Solara/Monaco/fileaccess/node_modules/body-parser/lib/read.js

    • Size

      4KB

    • MD5

      c148bb38c59ce266e271c96ab1f2d192

    • SHA1

      027f3fbd8a5370ddec744d33ec9d594db41f6293

    • SHA256

      1e9e274755366c39ae70e8b9a7a42fc12219566e67efaf9b7ebc2a8b337f5b6b

    • SHA512

      bc4779cda1a3b130eb8cf76bb40676046ceb514ddc5c1891d7324776e6188e5d5ceb4c0799cf2fbc007786849ed07903cb59f61ffcac407300eef0a16cb7c498

    • SSDEEP

      96:1F2ISKMGJ0n9WbOaHSb+IR1+GFQBnPQCbfkZ/OPqgVB9OuCyMQ:1FwZYbhHSb9R1+GFQBICbfkWVBqlQ

    Score
    3/10
    execution
    behavioral8

    • Target

      Solara/Monaco/fileaccess/node_modules/body-parser/lib/types/json.js

    • Size

      5KB

    • MD5

      6b036408f968978bf9668496db9953ba

    • SHA1

      af1f14428152576f1c047c3462d26a7feb98635a

    • SHA256

      44f8b529333004e2aaff6db3a1dbe7068f1ac5fa1173e9634686a78c2262af35

    • SHA512

      89bef97d3d5d0c8da0f3aa1e178fee1d04eee5200c2f037bd55761a61e6c6a251f7314e82343761ef227a997909f4a0237a3ff5f79a1a7bb9e879a465ab84f86

    • SSDEEP

      96:1F+Graz+dz1PbSDp2qjlvqzi+QBYwxcG5l+NbkAZiVl7g6A4QYSR:1F+Graz8TUj0mx+wOgybriVZg6ffSR

    Score
    3/10
    execution
    behavioral9

    • Target

      Solara/Monaco/fileaccess/node_modules/body-parser/lib/types/raw.js

    • Size

      1KB

    • MD5

      acb38e4fe575afaf8d1a257e47c6e362

    • SHA1

      ea7411ff5a71df8d426322d07103e5894630e29b

    • SHA256

      4e9cc80a7ee8bd667c68c264b4c374b28e731246ddb6ec22c3968daf837e30a2

    • SHA512

      157427ad25390339b045b9bb81753709498b69b2cc8b9c918c19d52d1cb4f6bbe5b6b07885d0a7f66ef359b7080dc9a42216f71911b08ade04c1a112192bff50

    Score
    9/10
    discoveryevasionexecutionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Downloads MZ/PE file

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Blocklisted process makes network request

    • Checks whether UAC is enabled

      evasiontrojan

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral10

    • Target

      Solara/Monaco/fileaccess/node_modules/body-parser/lib/types/text.js

    • Size

      2KB

    • MD5

      beb4ada09306f8d6435566d9e88076d3

    • SHA1

      eda9bc036c9d10f1400cd2e4a8832949671cadc7

    • SHA256

      54a6e8ef720b06a300b21f6c60387805dec743a64154784a609dfe8c6860776a

    • SHA512

      5d9c9c6837b9599d29db9b1eb54cd2a4e215feeb028137f31c20f2b02e38f600aa8c02721444dc41d7bfc206ad39a810076853d09fa1e3113b5708a75443131e

    Score
    3/10
    execution
    behavioral11

    • Target

      Solara/Monaco/fileaccess/node_modules/body-parser/lib/types/urlencoded.js

    • Size

      5KB

    • MD5

      906a833480ce8841bfa5aeb95b5c085f

    • SHA1

      8f74a7d616bf363b78844d3bcc2f554d7c76a952

    • SHA256

      752717d87aad57451638af2073b04eba964f348910c0bcf0070c43e732de5eb2

    • SHA512

      7676871dd3012dad0472be51698d9d1677622ba3d392417a41d22ef7f6d7df6c8085516bb9bdc45d4f125815161899aa889d756d18cd41f11e2402e659f7934d

    • SSDEEP

      96:1F+GrIE8S/wtosB5XaYp2Yy+QBYwxcGw+NbaZMz71LX7g6KspqOJUICK0mMQ7eLR:1F+GrIE8S/wtoGXaUyx+wODybGMz7132

    Score
    3/10
    execution
    behavioral12

    • Target

      Solara/Monaco/fileaccess/node_modules/bytes/index.js

    • Size

      3KB

    • MD5

      83cf8fe86424252c5a9a3e2fe90dbd57

    • SHA1

      bd46529e5637ff1a659f1d4af2598925b12741e0

    • SHA256

      893fcbbbe962dc00e40dc2e4b20e76e92d874dd257345003c6575d940e91a37f

    • SHA512

      f0630152a247cf51dfc677c22323afccc667350a11db093b59b93f403481deba1d44cd78cd53f4c4a3e2df297c35fe54cdc841c10c4667ebb81d3a54fbf56d43

    Score
    3/10
    execution
    behavioral13

    • Target

      Solara/Monaco/fileaccess/node_modules/call-bind/callBound.js

    • Size

      413B

    • MD5

      fda064fefaeb89252271922954d69a4f

    • SHA1

      7bac1561b456a282abe97cb9bc4e5e0d8a10e769

    • SHA256

      2b2fce7622fdd680256d28bcd59c30913546a825bf69d754d21a1d21ccc2928c

    • SHA512

      b0746c9dc90bb513e7d6190470ce0acbb0c2059b97184b9391f581e9a490729669c8479ba8eaafc1980f4e058a396bad11031d048387b5223a7b4b9e6a4b1dae

    Score
    3/10
    execution
    behavioral14

    • Target

      Solara/Monaco/fileaccess/node_modules/call-bind/index.js

    • Size

      1KB

    • MD5

      40109fa1aade9c89c9587e77011f7301

    • SHA1

      91f8eaf2fba5ee5c36e33207feeceee846c3e04a

    • SHA256

      6b4ea26f8ca351cee55da416500ffca72fdb14eb5909f1512ce8ca68e47d7621

    • SHA512

      d308a91b496c9fbd2db7d8b907d660142172342e990755093d892cf2b8382504119593bb83882f37db71e925803c37b9b098edc748f09eb6dc3f84b8dcc28f9b

    Score
    3/10
    execution
    behavioral15

    • Target

      Solara/Monaco/fileaccess/node_modules/content-disposition/index.js

    • Size

      10KB

    • MD5

      43a307ff7de26dbec523ec966c434f94

    • SHA1

      ed7f187b72a7b1f81d113bad5aa9347c242120d5

    • SHA256

      e86a88a5d1a9dd74faa753ca4e47a78e38ae930f3206e5e887cf6cb0ad70cbf8

    • SHA512

      79c073d3f0dea6c1606029b9a476cdce30ebbfb7b6ca95935a2e3f2cc97e70f3f00dbe8b7067beea78dae120f4941e60a7aa26592cff18e5cdf56f335127092d

    • SSDEEP

      192:NnPSCe5ZBHNVzX1t6/khk3bnEm+4qcVupDAGJvyAJK:NnPSD5ZBttXbMqenircgDAwrK

    Score
    3/10
    execution
    behavioral16

    • Target

      Solara/Monaco/fileaccess/node_modules/content-type/index.js

    • Size

      4KB

    • MD5

      4781c7ea0309edac61c3a36e3ea9da10

    • SHA1

      1b6e7e8d1963ce958cf0f225223fadb5ef12f86d

    • SHA256

      7d76ae0f8ecc0a8c053de97b0f695f3fa3df33f692d1bd241307995304e5f63d

    • SHA512

      d458f8962f44ec30bf519a54aef063960d9cac2a954493383fc2ef46781c3244740f18c7daf1821b4e0babbd56b356228f7247ce40de9f3276de91a71c66c78c

    • SSDEEP

      96:CJFvvhHgqZlI8IDzdlalSqZf/gf6GosMySqUqMGa9Nw+j0i8L:CJFHhAqbI8IdUYVhvJMG6Yii

    Score
    3/10
    execution
    behavioral17

    • Target

      Solara/Monaco/fileaccess/node_modules/cookie-signature/index.js

    • Size

      1KB

    • MD5

      a9634aa95d321b9a6d90bec5d3d23937

    • SHA1

      bb5c2c0a463aa10074caf991f67681231b1f0c21

    • SHA256

      8d762862020064468b4af17e561ee1ee29d9d55311a1c19d958c4ff2be912963

    • SHA512

      214e27edb4367aa2ef322c4d857a918ebd57bc825646184f90fa6911f830b3755fce1fdff30a5d231ea11ba4ddd82b4f2afc36451289f0b4334c445e9a26dc48

    Score
    3/10
    execution
    behavioral18

    • Target

      Solara/Monaco/fileaccess/node_modules/safe-buffer/index.js

    • Size

      1KB

    • MD5

      35de14728187b87c9ab687c3bdc37436

    • SHA1

      94ae42f086b35537cc69d82c0f55c6d59e6b8d98

    • SHA256

      184d5c4a83512e3f49d4d5b52f7073f601f933bad11f1fbb3ad364ca5e6478e1

    • SHA512

      b2b3ef941a8d76480f519b68cd05ecf0aace617a2c414f3e7d375a59718b06f6e7bf88ef384f3e400642431c296bf400f80048e4ad8efb93860e41d697f337b1

    Score
    3/10
    execution
    behavioral19

    • Target

      Solara/Monaco/index.html

    • Size

      20KB

    • MD5

      12207f73e175f72175526f73aa23ce83

    • SHA1

      1a5184b7cf9505363b02bb8012a802d1032f5238

    • SHA256

      8dfd03ab23c85dfb8d60f30e37015fa4e40171292e331c04372f620388799e5f

    • SHA512

      d7902c5a36b65b9a2eeaa2a2ce4ed5dcd2c15703362f9c52666c5722dcb10773e8206eda0630358673e2d8a49e16237700d00ae37b38f6e712fd9bea2bb149d1

    • SSDEEP

      384:FihTARA5LmClk2P5VvW4NGthbVBJjRBX+BILnoamLR7:FihTnlf+lthbVBJTOyboamLR7

    Score
    3/10
    discovery
    behavioral20

    • Target

      Solara/Monaco/vs/basic-languages/lua/lua.js

    • Size

      5KB

    • MD5

      8706d861294e09a1f2f7e63d19e5fcb7

    • SHA1

      fa5f4bdc6c2f1728f65c41fb5c539211a24b6f23

    • SHA256

      fc2d6fb52a524a56cd8ac53bfe4bad733f246e76dc73cbec4c61be32d282ac42

    • SHA512

      1f9297eb4392db612630f824069afdc9d49259aba6361fb0b87372123ada067bc27d10d0623dc1eb7494da55c82840c5521f6fef74c1ada3b0fd801755234f1f

    • SSDEEP

      96:SD3yDUfRD5dyVdO29SvE/TMCL8CvcOAtOfxSVkxMZlMfE:nD4Ldyn7Ss/TMmUtOfxhxjE

    Score
    3/10
    execution
    behavioral21

    • Target

      Solara/Monaco/vs/editor/editor.main.js

    • Size

      2.0MB

    • MD5

      9399a8eaa741d04b0ae6566a5ebb8106

    • SHA1

      5646a9d35b773d784ad914417ed861c5cba45e31

    • SHA256

      93d28520c07fbca09e20886087f28797bb7bd0e6cf77400153aab5ae67e3ce18

    • SHA512

      d37ef5a848e371f7db9616a4bf8b5347449abb3e244a5527396756791583cad455802450ceeb88dce39642c47aceaf2be6b95bede23b9ed68b5d4b7b9022b9c8

    • SSDEEP

      24576:SmmBNDw4gCXJkB4nIg2IxhbaeZYIMsNjvit4f:wDw4gCXJk62+aeKIMsNjvit4f

    Score
    3/10
    execution
    behavioral22

    • Target

      Solara/Monaco/vs/editor/editor.main.nls.js

    • Size

      31KB

    • MD5

      74dd2381ddbb5af80ce28aefed3068fc

    • SHA1

      0996dc91842ab20387e08a46f3807a3f77958902

    • SHA256

      fdd9d64ce5284373d1541528d15e2aa8aa3a4adc11b51b3d71d3a3953f8bcc48

    • SHA512

      8841e0823905cf3168f388a7aeaf5edd32d44902035ba2078202193354caf8cd74cb4cab920e455404575739f35e19ea5f3d88eab012c4ebefc0ccb1ed19a46e

    • SSDEEP

      384:h03CdtOurX25WyV1Vdf40CJjocZC6F7PKUvRjAaswHq9x3H6Sg4NFVlQlUDZpLjb:23mmysb1zVes3pxCSgwgwjhb

    Score
    3/10
    execution
    behavioral23

    • Target

      Solara/Monaco/vs/loader.js

    • Size

      27KB

    • MD5

      8a3086f6c6298f986bda09080dd003b1

    • SHA1

      8c7d41c586bfa015fb5cc50a2fdc547711b57c3c

    • SHA256

      0512d9ed3e5bb3daef94aa5c16a6c3e2ee26ffed9de00d1434ffe46a027b16b9

    • SHA512

      9e586742f4e19938132e41145deec584a7b8c7e111b3c6e9254f8d11db632ebe4d66898458ed7bcfc0614d06e20eb33d5a6a8eb8b32d91110557255cf1dbf017

    • SSDEEP

      768:3J6C/c2x0cAu57XQxJRDRi+R/TvrCv3zM2GRl0VEj:Z6grH7qTXRvmDI

    Score
    3/10
    execution
    behavioral24

    • Target

      Solara/Newtonsoft.Json.dll

    • Size

      695KB

    • MD5

      195ffb7167db3219b217c4fd439eedd6

    • SHA1

      1e76e6099570ede620b76ed47cf8d03a936d49f8

    • SHA256

      e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d

    • SHA512

      56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac

    • SSDEEP

      12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/

    Score
    1/10
    behavioral25

    • Target

      Solara/Solara.dll

    • Size

      4.4MB

    • MD5

      a53cf82436dfac0fda9e01183a722670

    • SHA1

      8c8d115de8d37fcd67f7492d7e787226e33a83b2

    • SHA256

      c59e574dea69bfd4cff31d338b65968c2b90a3de7331acbeb00bd67561598f8a

    • SHA512

      f724cc057e3597e2817646235afe3b56fab7e62e35a78cb1817cf56c152a0b8e172081e23d2f18003417a92a16f54f7d11ce3c70ae124048a0ce90b9b415652e

    • SSDEEP

      98304:lk5QmmwKHEPKtxHsVGGK0XIbNJ4RCiwGIn3qWvBe4teHtDSf:lkfmzrHEKOyvQaaceHtM

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral26

    • Target

      Solara/Solara.exe

    • Size

      91KB

    • MD5

      612972cbef43f6f858bacbdd0621b96c

    • SHA1

      483c061f252600b82b2a43f2e914bae914650275

    • SHA256

      fef5337276ab1c7b143eda65c8130d91628417ea21a7a54c65329d9fe2ef4f9c

    • SHA512

      dd86d6990cfac3b751143e92e3c789dd02c19497f3d01856f46ba8f593a52d0de1db0241eb84d9ff37d0d4daebce1dcea467ead7775034a93e3c91a23c1d7f5a

    • SSDEEP

      1536:UXohcXjJfASZe9I3BbbHVlnOXrPBdfeISuAOl801AbcsqD95wSxdRfC:4wcXjOSYMbb1lnOXrPXe7vhq5ZK

    Score
    1/10
    behavioral27

    • Target

      Solara/WebView2Loader.dll

    • Size

      133KB

    • MD5

      a0bd0d1a66e7c7f1d97aedecdafb933f

    • SHA1

      dd109ac34beb8289030e4ec0a026297b793f64a3

    • SHA256

      79d7e45f8631e8d2541d01bfb5a49a3a090be72b3d465389a2d684680fee2e36

    • SHA512

      2a50ae5c7234a44b29f82ebc2e3cfed37bf69294eb00b2dc8905c61259975b2f3a059c67aeab862f002752454d195f7191d9b82b056f6ef22d6e1b0bb3673d50

    • SSDEEP

      3072:e5i6Uab3sFhPk6vEmG1PU6dLXm2ng3esQDqEt2JljdTu:e5P2e6vERtUyTmHEtmI

    Score
    1/10
    behavioral28

    • Target

      Solara/Wpf.Ui.dll

    • Size

      5.2MB

    • MD5

      aead90ab96e2853f59be27c4ec1e4853

    • SHA1

      43cdedde26488d3209e17efff9a51e1f944eb35f

    • SHA256

      46cfbe804b29c500ebc0b39372e64c4c8b4f7a8e9b220b5f26a9adf42fcb2aed

    • SHA512

      f5044f2ee63906287460b9adabfcf3c93c60b51c86549e33474c4d7f81c4f86cd03cd611df94de31804c53006977874b8deb67c4bf9ea1c2b70c459b3a44b38d

    • SSDEEP

      98304:Com1p/B6MvSmaRI+VcDNkq4pmvhAHDfyyrhl:W1HZNkq4p

    Score
    1/10
    behavioral29

    • Target

      Solara/libcurl.dll

    • Size

      522KB

    • MD5

      e31f5136d91bad0fcbce053aac798a30

    • SHA1

      ee785d2546aec4803bcae08cdebfd5d168c42337

    • SHA256

      ee94e2201870536522047e6d7fe7b903a63cd2e13e20c8fffc86d0e95361e671

    • SHA512

      a1543eb1d10d25efb44f9eaa0673c82bfac5173055d04c0f3be4792984635a7c774df57a8e289f840627754a4e595b855d299070d469e0f1e637c3f35274abe6

    • SSDEEP

      12288:InAnSwPc/1BzyLmI2MB1MqcUfCKHU1XAfK6ae:I6Pc/1BOKtaeqcUaZXm

    Score
    1/10
    behavioral30

    • Target

      Solara/vcruntime140.dll

    • Size

      99KB

    • MD5

      7a2b8cfcd543f6e4ebca43162b67d610

    • SHA1

      c1c45a326249bf0ccd2be2fbd412f1a62fb67024

    • SHA256

      7d7ca28235fba5603a7f40514a552ac7efaa67a5d5792bb06273916aa8565c5f

    • SHA512

      e38304fb9c5af855c1134f542adf72cde159fab64385533eafa5bb6e374f19b5a29c0cb5516fc5da5c0b5ac47c2f6420792e0ac8ddff11e749832a7b7f3eb5c8

    • SSDEEP

      1536:sC6b39cL/iRDhXq4GZLAy10i5XNC83tTPw98APXbxecbSQ25I4I/Cq:sVPphXq30yvXL5APbxecbSDu

    Score
    1/10
    behavioral31

    • Target

      Solara/zlib1.dll

    • Size

      113KB

    • MD5

      75365924730b0b2c1a6ee9028ef07685

    • SHA1

      a10687c37deb2ce5422140b541a64ac15534250f

    • SHA256

      945e7f5d09938b7769a4e68f4ef01406e5af9f40db952cba05ddb3431dd1911b

    • SHA512

      c1e31c18903e657203ae847c9af601b1eb38efa95cb5fa7c1b75f84a2cba9023d08f1315c9bb2d59b53256dfdb3bac89930252138475491b21749471adc129a1

    • SSDEEP

      3072:wsuxy/bjdeT1dtDCV8SSsfj7cTpHTBfQjxcHE2Fl:wsZ/bRe5PDCV8SLfcFTBIjxyE2Fl

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

themida
Score
7/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

discoveryevasionexecutionthemidatrojan
Score
9/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

Score
1/10

behavioral26

evasionthemidatrojan
Score
9/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10