General

  • Target
    Solara.zip
  • Size 11.4MB
  • Sample240829-wpnbcawcmp
  • SHA256 1584752709b6b0c5cd83ed8d075a29915abadd32ffdd7c8974f45bb45e7aac40
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • rhadamanthys

C2
  • https://144.76.133.166:8034/5502b8a765a7d7349/k5851jfq.guti6

Targets

    • Target
      Solara.zip
    • Size 11.4MB
    • SHA256 1584752709b6b0c5cd83ed8d075a29915abadd32ffdd7c8974f45bb45e7aac40
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Password - github.txt
    • Size 17B
    • SHA256 4ae8508642027b5e5373a40b38da75c2a36ee3e99f693650c0803168533dbbc7
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Solara/Debug/Addition.dll
    • Size 30KB
    • SHA256 8be1f5581437b6f5ba48705e8956c8bc0765bbd1d6053242640c75bd94048aa9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Solara/Debug/Autoupdater.ini
    • Size 5KB
    • SHA256 dcae62d049c4dd496effab6f02220bc270c6c098ebb55a5a6e55fbafad2974d2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Solara/Debug/DebugPPF.tmp
    • Size 11KB
    • SHA256 63909409d9c79950289701c4a58605ea7fcd30703163fce0b4ac81204f0b3cca
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Solara/Debug/DebugPPT.tmp
    • Size 11KB
    • SHA256 9f2b02ba814c2975a7b6ed5aa03345046a9c9d3036481a8a109b132a951e82a0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Solara/Debug/Helper.dll
    • Size 189B
    • SHA256 6b325cadd8992d998c4fbc8ed56079c2850b68ea2d38432d51c26ce82b0a5419
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      Solara/Debug/Management.log
    • Size 8KB
    • SHA256 4dd051de9b04902fc59d411b1c27c42007cacca4ea52e88d71c897cad1d990cc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Solara/Debug/Resource.dll
    • Size 10.7MB
    • SHA256 883aefb081a1f9ef974ceb16e12c215e92fee13531c052279404bd11b2f8e479
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Solara/Debug/main.ini
    • Size 4KB
    • SHA256 d3d79eda930253d1ad388f60a56775f7d6bff80ce5a4e07c812d7d338fc93593
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Solara/Debug/ukm_db
    • Size 96KB
    • SHA256 502483b0d0d9ba2d0c50565c296cb685c9098cded6ffeb74f924eca85af11443
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Solara/Packaged/Main.ini
    • Size 1KB
    • SHA256 b975c9251ef7394dcc69f49e54dc5aa5e8df32f9b5e8c687484ddd840eb94d20
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      Solara/Packaged/Resource.dll
    • Size 189B
    • SHA256 a9661f89b8d957f4e71cbe1ba0342a39e5b50a1d80d974e2e1b349a273967f1b
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      Solara/Packaged/Utils.dll
    • Size 1KB
    • SHA256 b7b8b412ab1e4f32da8a7cd42aeaa6e7d8d340cf14977d3e87f7d8f5eb689b0f
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      Solara/Solara.exe
    • Size 433KB
    • SHA256 cb6b38f445f334599088702569ed9c9d4b0a54c7c88097a16ec6e58055517a3c
    • MD5 SHA1 SHA512 SSDEEP
    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

    • Target
      Solara/accessibilitycpl.dll
    • Size 274KB
    • SHA256 a28ef80b49f85f95f929d5c40245b05f95d58bb672764c3539ce69098db9bcc2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Solara/buffed/chidedOcurred.xml
    • Size 14KB
    • SHA256 0e4bf326bbd329a90a8a04e755d6c2f1f6f26d67b8db3295a4e15561b7b1707d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Solara/buffed/decineSatoriiCoppy.xml
    • Size 582B
    • SHA256 2ce025a1cfb9f7708815d2f1c3a4cc4478930432f7a5f7b9b5adc61f8868f8b4
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      Solara/buffed/ecocide.xml
    • Size 12KB
    • SHA256 d4df2b4bcd5d34a626bd042776f320da16845c7c7ba0c6dfacde7f46624bfac6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Solara/buffed/gheddaOptimal.xml
    • Size 7KB
    • SHA256 06c2e9fdaf092549ec926bffb21ba09a4d3284c4804f1fa56e9e69d0bf714086
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Solara/buffed/pickup.xml
    • Size 4KB
    • SHA256 b482104f25fc6c5484d75e543a986eb8ace6104dfa809c8cad04726bbfb8f7a3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Solara/buffed/pictaviSina.xml
    • Size 292B
    • SHA256 7da1206a59098a4a0b2259faea8949744db3259758dd17319af35d724bca4889
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      Solara/oleprn.dll
    • Size 148KB
    • SHA256 3e595c971729c2eb7879b6ce468d11e286ea98fa8c1abf93abbc5888542013d0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Solara/wwancfg.dll
    • Size 103KB
    • SHA256 c4b1f99e87b4568b5b9ff2ded05cebc55376051d44877f5574f2c125566ce604
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks