Overview
overview
9Static
static
3So1araBoot...nf.zip
windows7-x64
1So1araBoot...nf.zip
windows10-2004-x64
1ReadMe.txt
windows7-x64
1ReadMe.txt
windows10-2004-x64
1So1ara.zip
windows7-x64
1So1ara.zip
windows10-2004-x64
1Solara/Sol...V2.exe
windows7-x64
7Solara/Sol...V2.exe
windows10-2004-x64
9Solara/Sol...st.lua
windows7-x64
3Solara/Sol...st.lua
windows10-2004-x64
3Solara/Sol...t2.lua
windows7-x64
3Solara/Sol...t2.lua
windows10-2004-x64
3Solara/Sol...le.txt
windows7-x64
1Solara/Sol...le.txt
windows10-2004-x64
1Solara/Sol...et.txt
windows7-x64
1Solara/Sol...et.txt
windows10-2004-x64
1Solara/Sol...le.txt
windows7-x64
1Solara/Sol...le.txt
windows10-2004-x64
1Solara/Sol..._1.txt
windows7-x64
1Solara/Sol..._1.txt
windows10-2004-x64
1Solara/Sol..._2.txt
windows7-x64
1Solara/Sol..._2.txt
windows10-2004-x64
1Solara/Sol...le.txt
windows7-x64
1Solara/Sol...le.txt
windows10-2004-x64
1Solara/Sol...le.txt
windows7-x64
1Solara/Sol...le.txt
windows10-2004-x64
1Solara/Sol...tefile
windows7-x64
1Solara/Sol...tefile
windows10-2004-x64
1Solara/Sol...le.txt
windows7-x64
1Solara/Sol...le.txt
windows10-2004-x64
1Solara/Sol...LL.txt
windows7-x64
1Solara/Sol...LL.txt
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
So1araBootstrappzxcvbnf.zip
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
So1araBootstrappzxcvbnf.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
ReadMe.txt
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
ReadMe.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
So1ara.zip
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
So1ara.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Solara/Solar/SolaraV2.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Solara/Solar/SolaraV2.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Solara/Solar/autoexec/test.lua
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Solara/Solar/autoexec/test.lua
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Solara/Solar/autoexec/test2.lua
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Solara/Solar/autoexec/test2.lua
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Solara/Solar/workspace/.tests/appendfile.txt
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Solara/Solar/workspace/.tests/appendfile.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Solara/Solar/workspace/.tests/getcustomasset.txt
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Solara/Solar/workspace/.tests/getcustomasset.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Solara/Solar/workspace/.tests/isfile.txt
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
Solara/Solar/workspace/.tests/isfile.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Solara/Solar/workspace/.tests/listfiles/test_1.txt
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
Solara/Solar/workspace/.tests/listfiles/test_1.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Solara/Solar/workspace/.tests/listfiles/test_2.txt
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
Solara/Solar/workspace/.tests/listfiles/test_2.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Solara/Solar/workspace/.tests/loadfile.txt
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
Solara/Solar/workspace/.tests/loadfile.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Solara/Solar/workspace/.tests/readfile.txt
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Solara/Solar/workspace/.tests/readfile.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Solara/Solar/workspace/.tests/writefile
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
Solara/Solar/workspace/.tests/writefile
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Solara/Solar/workspace/.tests/writefile.txt
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Solara/Solar/workspace/.tests/writefile.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Solara/Solar/workspace/EzHubLL.txt
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Solara/Solar/workspace/EzHubLL.txt
Resource
win10v2004-20240802-en
General
-
Target
So1araBootstrappzxcvbnf.zip
-
Size
75.0MB
-
MD5
1a1fbb907aead7d59a4821d4df3fa448
-
SHA1
32acdd0a119b6eef7e5269655c0b9a4cd5632065
-
SHA256
c221df92ab8ad749226c07b8951349a0d0fa6aff77b25357e8942e5c64c612b0
-
SHA512
6f7709f08a1426970a4b6453d072c4ae807c16f20911f97dff3f39f13828a97d27ddffe56818ecc671fb26ea8bedf2d6724f6ce7d9847453638e44a7b8b22c73
-
SSDEEP
1572864:qCoXmi8RpFrpAzLEvR2Hxefu8qs8uyht1dTSUPvLeFclMR0G+HpA:qtXPILALEqefoBPRBPvSFYXa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Solara/Solar/SolaraV2.exe
Files
-
So1araBootstrappzxcvbnf.zip.zip
Password: EMBVW
-
ReadMe.txt
-
So1ara.zip.zip
Password: EMBVW
-
Solara/Solar/SolaraV2.exe.exe windows:4 windows x86 arch:x86
Password: EMBVW
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 682KB - Virtual size: 681KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Solara/Solar/autoexec/test.lua
-
Solara/Solar/autoexec/test2.lua
-
Solara/Solar/workspace/.tests/appendfile.txt
-
Solara/Solar/workspace/.tests/getcustomasset.txt
-
Solara/Solar/workspace/.tests/isfile.txt
-
Solara/Solar/workspace/.tests/listfiles/test_1.txt
-
Solara/Solar/workspace/.tests/listfiles/test_2.txt
-
Solara/Solar/workspace/.tests/loadfile.txt
-
Solara/Solar/workspace/.tests/readfile.txt
-
Solara/Solar/workspace/.tests/writefile
-
Solara/Solar/workspace/.tests/writefile.txt
-
Solara/Solar/workspace/EzHubLL.txt
-
Solara/Solar/workspace/IY_FE.iy
-
Solara/Solar/workspace/Sky Hub/Sky Hub Settings.json