Overview

overview

6

Static

static

3

SolaraB2.rar

windows7-x64

3

SolaraB2.rar

windows10-2004-x64

3

SolaraB2/S...er.exe

windows7-x64

6

SolaraB2/S...er.exe

windows10-2004-x64

6

SolaraB2/S..._FE.iy

windows7-x64

3

SolaraB2/S..._FE.iy

windows10-2004-x64

3

SolaraB2/S...s.json

windows7-x64

3

SolaraB2/S...s.json

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SolaraB2.zip

  • Size

    6KB

  • Sample

    240803-f65c7avcln

  • MD5

    16434087ae5892e84731067d577c329c

  • SHA1

    8b5d70e1d9cf723d855edea9397dad232e3df008

  • SHA256

    31a41571e3cf39f65893a8a6d97da7d846114dce12adeb158fd013548f1cc18f

  • SHA512

    03b1abaa4b6f5594da0130c83710854b1f1ad266a9d91e181f5723662a811dbd126b5417b49e22199f071536176fbbfb1d980d62e3856e2668dc2c43ec136f72

  • SSDEEP

    192:w4bWgy6uqRg7Z7axhkz/Fvc/Zpdn0iXHieX:w4b3yYR+ZGcb8ptkG

Score
6/10
discovery

Malware Config

Targets

    • Target

      SolaraB2.zip

    • Size

      6KB

    • MD5

      16434087ae5892e84731067d577c329c

    • SHA1

      8b5d70e1d9cf723d855edea9397dad232e3df008

    • SHA256

      31a41571e3cf39f65893a8a6d97da7d846114dce12adeb158fd013548f1cc18f

    • SHA512

      03b1abaa4b6f5594da0130c83710854b1f1ad266a9d91e181f5723662a811dbd126b5417b49e22199f071536176fbbfb1d980d62e3856e2668dc2c43ec136f72

    • SSDEEP

      192:w4bWgy6uqRg7Z7axhkz/Fvc/Zpdn0iXHieX:w4b3yYR+ZGcb8ptkG

    Score
    3/10
    behavioral1behavioral2

    • Target

      SolaraB2/SolaraB2/Solara/SolaraBootstrapper.exe

    • Size

      13KB

    • MD5

      6557bd5240397f026e675afb78544a26

    • SHA1

      839e683bf68703d373b6eac246f19386bb181713

    • SHA256

      a7fecfc225dfdd4e14dcd4d1b4ba1b9f8e4d1984f1cdd8cda3a9987e5d53c239

    • SHA512

      f2399d34898a4c0c201372d2dd084ee66a66a1c3eae949e568421fe7edada697468ef81f4fcab2afd61eaf97bcb98d6ade2d97295e2f674e93116d142e892e97

    • SSDEEP

      192:konexQO0FoAWyEfJkVIaqaLHmr/XKT0ifnTJ1jvVXctNjA:HnexHAWyEfJoIaqayzKAifd1LVEj

    Score
    6/10
    discovery

    • Legitimate hosting services abused for malware hosting/C2

    behavioral3behavioral4

    • Target

      SolaraB2/SolaraB2/Solara/workspace/IY_FE.iy

    • Size

      971B

    • MD5

      059dd36a7e96d6060762b18d2bf13864

    • SHA1

      038bfd6bdde0350b3c5b03701e8cdbdc92a3ff6c

    • SHA256

      427eecaf21ec588e89d8449a8f7ba160550ae46b7316542cd1d595e1671fa632

    • SHA512

      f3d9ab8e6601c7245879cb8b3502d81b7bc77c51be947b11ad129d4191b03e4206e2845e487dd9b0e3f265e1699b860ef11e34b2983b7bb880fbac8a077c4ebe

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      SolaraB2/SolaraB2/Solara/workspace/Trollolo/options.json

    • Size

      79B

    • MD5

      657ed2a2091f913e3ce9829db8657f69

    • SHA1

      3db552482cd06a1fcfa3b5c3730e2380132ea88b

    • SHA256

      80727a7c22dd6969045bd7eae9e4378b0e55c60fe0038da64fb85db4fba325b4

    • SHA512

      14df47bcb225ab7b6e1cd6aaf49001bdea38edfffe3bc006f082c52b17ce3ed655e34612bf31e6a49de4bdd00c1f4db129030a98c1e7179e4e25f62600e86ed9

    Score
    3/10
    discovery
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks