Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
1Solara.zip
windows11-21h2-x64
1Solara/Sol...V2.exe
windows11-21h2-x64
10Solara/Sol...st.lua
windows11-21h2-x64
3Solara/Sol...t2.lua
windows11-21h2-x64
3Solara/Sol...le.txt
windows11-21h2-x64
3Solara/Sol...et.txt
windows11-21h2-x64
3Solara/Sol...le.txt
windows11-21h2-x64
3Solara/Sol..._1.txt
windows11-21h2-x64
3Solara/Sol..._2.txt
windows11-21h2-x64
3Solara/Sol...le.txt
windows11-21h2-x64
3Solara/Sol...le.txt
windows11-21h2-x64
3Solara/Sol...tefile
windows11-21h2-x64
1Solara/Sol...le.txt
windows11-21h2-x64
3Solara/Sol...LL.txt
windows11-21h2-x64
3Solara/Sol..._FE.iy
windows11-21h2-x64
3Solara/Sol...s.json
windows11-21h2-x64
3Analysis
-
max time kernel
61s -
max time network
142s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
06/08/2024, 14:34
Static task
static1
Behavioral task
behavioral1
Sample
Solara.zip
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
Solara/Solara/SolaraV2.exe
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
Solara/Solara/autoexec/test.lua
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
Solara/Solara/autoexec/test2.lua
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
Solara/Solara/workspace/.tests/appendfile.txt
Resource
win11-20240802-en
Behavioral task
behavioral6
Sample
Solara/Solara/workspace/.tests/getcustomasset.txt
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
Solara/Solara/workspace/.tests/isfile.txt
Resource
win11-20240802-en
Behavioral task
behavioral8
Sample
Solara/Solara/workspace/.tests/listfiles/test_1.txt
Resource
win11-20240802-en
Behavioral task
behavioral9
Sample
Solara/Solara/workspace/.tests/listfiles/test_2.txt
Resource
win11-20240802-en
Behavioral task
behavioral10
Sample
Solara/Solara/workspace/.tests/loadfile.txt
Resource
win11-20240802-en
Behavioral task
behavioral11
Sample
Solara/Solara/workspace/.tests/readfile.txt
Resource
win11-20240802-en
Behavioral task
behavioral12
Sample
Solara/Solara/workspace/.tests/writefile
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
Solara/Solara/workspace/.tests/writefile.txt
Resource
win11-20240802-en
Behavioral task
behavioral14
Sample
Solara/Solara/workspace/EzHubLL.txt
Resource
win11-20240802-en
Behavioral task
behavioral15
Sample
Solara/Solara/workspace/IY_FE.iy
Resource
win11-20240802-en
Behavioral task
behavioral16
Sample
Solara/Solara/workspace/Sky Hub/Sky Hub Settings.json
Resource
win11-20240802-en
General
-
Target
Solara/Solara/autoexec/test.lua
-
Size
34B
-
MD5
f051c998ef025a1ccd4f6f7abe16e55e
-
SHA1
2e75e1237531ae3c0647c0fad7cf6ae1687d0e99
-
SHA256
601c187ff3410f7c71258bd29c0e48a9f40a046a745093f71e7172decf0f0eae
-
SHA512
748cb431b3a2208c07187c80a3c5b5174b2c536fb056e7b48646875cbd4392225da4aaaaf376f16ca79ab854245e7638cf02103f0913abff55e005da482d498a
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1287768749-810021449-2672985988-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1287768749-810021449-2672985988-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 720 OpenWith.exe