C:\Users\Ashtin\Desktop\WTF\SolaraBootstrapper\SolaraBootstrapper\bin\Release\Bootstrapper.pdb
Overview
overview
7Static
static
3SolaraB.7z
windows11-21h2-x64
3SolaraB/Bo...er.exe
windows11-21h2-x64
7SolaraB/Bo...15.exe
windows11-21h2-x64
6SolaraB/Bo...16.exe
windows11-21h2-x64
6SolaraB/DISCORD
windows11-21h2-x64
1SolaraB/sc...rk Dex
windows11-21h2-x64
1SolaraB/sc...ed ESP
windows11-21h2-x64
1SolaraB/wo...le.txt
windows11-21h2-x64
3SolaraB/wo...et.txt
windows11-21h2-x64
3SolaraB/wo...le.txt
windows11-21h2-x64
3SolaraB/wo..._1.txt
windows11-21h2-x64
3SolaraB/wo..._2.txt
windows11-21h2-x64
3SolaraB/wo...le.txt
windows11-21h2-x64
3SolaraB/wo...le.txt
windows11-21h2-x64
3SolaraB/wo...tefile
windows11-21h2-x64
1SolaraB/wo...le.txt
windows11-21h2-x64
3SolaraB/wo..._FE.iy
windows11-21h2-x64
3SolaraB/wo...on.dat
windows11-21h2-x64
3SolaraB/wo...pi.dat
windows11-21h2-x64
3SolaraB/wo...md.dat
windows11-21h2-x64
3Static task
static1
Behavioral task
behavioral1
Sample
SolaraB.7z
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
SolaraB/Bootstrapper.exe
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
SolaraB/BootstrapperV1.15.exe
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
SolaraB/BootstrapperV1.16.exe
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
SolaraB/DISCORD
Resource
win11-20240802-en
Behavioral task
behavioral6
Sample
SolaraB/scripts/Dark Dex
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
SolaraB/scripts/Unnamed ESP
Resource
win11-20240802-en
Behavioral task
behavioral8
Sample
SolaraB/workspace/.tests/appendfile.txt
Resource
win11-20240802-en
Behavioral task
behavioral9
Sample
SolaraB/workspace/.tests/getcustomasset.txt
Resource
win11-20240802-en
Behavioral task
behavioral10
Sample
SolaraB/workspace/.tests/isfile.txt
Resource
win11-20240802-en
Behavioral task
behavioral11
Sample
SolaraB/workspace/.tests/listfiles/test_1.txt
Resource
win11-20240802-en
Behavioral task
behavioral12
Sample
SolaraB/workspace/.tests/listfiles/test_2.txt
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
SolaraB/workspace/.tests/loadfile.txt
Resource
win11-20240802-en
Behavioral task
behavioral14
Sample
SolaraB/workspace/.tests/readfile.txt
Resource
win11-20240802-en
Behavioral task
behavioral15
Sample
SolaraB/workspace/.tests/writefile
Resource
win11-20240802-en
Behavioral task
behavioral16
Sample
SolaraB/workspace/.tests/writefile.txt
Resource
win11-20240802-en
Behavioral task
behavioral17
Sample
SolaraB/workspace/IY_FE.iy
Resource
win11-20240802-en
Behavioral task
behavioral18
Sample
SolaraB/workspace/dex/deps_version.dat
Resource
win11-20240802-en
Behavioral task
behavioral19
Sample
SolaraB/workspace/dex/rbx_api.dat
Resource
win11-20240802-en
Behavioral task
behavioral20
Sample
SolaraB/workspace/dex/rbx_rmd.dat
Resource
win11-20240802-en
General
-
Target
SolaraB.7z
-
Size
393KB
-
MD5
e18552488fb4e427f9d4e32c81b9e1bf
-
SHA1
3a7eeb4556b26493a5e0c515733fee77a26a5262
-
SHA256
50ca2b466db8fcadb4cddb16221e399ca730ead598936b3fbc1fed705b5069fc
-
SHA512
7a69d6ddd8aa056fb1ee573e4be49fd5fada94388d4daad7d29d7ba6dcf0a52ce595d0a254228daebed4f20c58d09e2a2267c36e10a0d0c43beb3b5308c20a45
-
SSDEEP
12288:0uSuRhq1sxIW3ZXSN5ze6CRFXk2oqEJ3Ut80693Jh:RZfsNdewsEXnZh
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/SolaraB/Bootstrapper.exe unpack001/SolaraB/BootstrapperV1.15.exe unpack001/SolaraB/BootstrapperV1.16.exe
Files
-
SolaraB.7z.7z
-
SolaraB/Bootstrapper.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 793KB - Virtual size: 792KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SolaraB/BootstrapperV1.15.exe.exe windows:4 windows x64 arch:x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 793KB - Virtual size: 793KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SolaraB/BootstrapperV1.16.exe.exe windows:4 windows x64 arch:x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 793KB - Virtual size: 793KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SolaraB/DISCORD
-
SolaraB/scripts/Dark Dex
-
SolaraB/scripts/Unnamed ESP
-
SolaraB/workspace/.tests/appendfile.txt
-
SolaraB/workspace/.tests/getcustomasset.txt
-
SolaraB/workspace/.tests/isfile.txt
-
SolaraB/workspace/.tests/listfiles/test_1.txt
-
SolaraB/workspace/.tests/listfiles/test_2.txt
-
SolaraB/workspace/.tests/loadfile.txt
-
SolaraB/workspace/.tests/readfile.txt
-
SolaraB/workspace/.tests/writefile
-
SolaraB/workspace/.tests/writefile.txt
-
SolaraB/workspace/IY_FE.iy
-
SolaraB/workspace/dex/deps_version.dat
-
SolaraB/workspace/dex/rbx_api.dat
-
SolaraB/workspace/dex/rbx_rmd.dat