General

  • Target

    Solara executor.rar

  • Size

    6.4MB

  • MD5

    e0a21aabe2e08ad5f31768725b6d3e03

  • SHA1

    03cdae2d159496e26a61b17975d7c0f742b65718

  • SHA256

    9cb28519e8b3b7392eb59b497f100378c480d88337509f6a589e22a559dfad8a

  • SHA512

    c74250055aeac62df3b1ed2eb2296f2a7a77540044a4ad19661df82d4c5db9550b12942a5438232bc3a0cf56342311f6fbfb70a15c3a6369b78b13b878a7395a

  • SSDEEP

    196608:uDhBLqB8DAdQjuwVQLRuJH3cuSbJo/ULbTAF:4hJ4EYQjuhkpxiqUnc

Score
10/10

Malware Config

Signatures

  • Redline family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Solara executor.rar
    .rar

    Password: VX183XSZ9

  • Solara executor/Solara.exe
    .exe windows:4 windows x86 arch:x86

    Password: VX183XSZ9


    Code Sign

    Headers

    Sections

  • Solara executor/cfg/SDL2.dll
    .dll windows:4 windows x86 arch:x86

    Password: VX183XSZ9

    2b4d4b8b380e37e4ea7642cf82515193


    Headers

    Imports

    Exports

    Sections

  • Solara executor/cfg/steam_api.dll
    .dll windows:6 windows x86 arch:x86

    Password: VX183XSZ9

    96452bf7bf319c4122ec00a5fbb0a955


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Solara executor/cfg/sw.dll
    .dll windows:6 windows x86 arch:x86

    Password: VX183XSZ9

    008242fad9f07c4558afbf4c19c7b68a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Solara executor/cfg/vgui.dll
    .dll windows:6 windows x86 arch:x86

    Password: VX183XSZ9

    63164b0a5441ee9772c2f512789403bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Solara executor/cfg/vgui2.dll
    .dll windows:6 windows x86 arch:x86

    Password: VX183XSZ9

    df8d88751aa0e68974b71fbedc73928b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Solara executor/script.txt