Overview
overview
10Static
static
3Solara.zip
windows11-21h2-x64
1Password - github.txt
windows11-21h2-x64
3Solara/Deb...on.dll
windows11-21h2-x64
1Solara/Deb...er.ini
windows11-21h2-x64
3Solara/Deb...PF.tmp
windows11-21h2-x64
3Solara/Deb...PT.tmp
windows11-21h2-x64
3Solara/Deb...er.dll
windows11-21h2-x64
1Solara/Deb...nt.log
windows11-21h2-x64
3Solara/Deb...ce.dll
windows11-21h2-x64
1Solara/Debug/main.ini
windows11-21h2-x64
3Solara/Debug/ukm_db
windows11-21h2-x64
1Solara/Pac...in.xml
windows11-21h2-x64
1Solara/Pac...ce.dll
windows11-21h2-x64
1Solara/Pac...ls.xml
windows11-21h2-x64
1Solara/Solara.exe
windows11-21h2-x64
10Solara/acc...pl.dll
windows11-21h2-x64
1Solara/buf...ed.xml
windows11-21h2-x64
1Solara/buf...py.xml
windows11-21h2-x64
1Solara/buf...de.xml
windows11-21h2-x64
1Solara/buf...al.xml
windows11-21h2-x64
1Solara/buf...up.xml
windows11-21h2-x64
1Solara/buf...na.xml
windows11-21h2-x64
1Solara/oleprn.dll
windows11-21h2-x64
1Solara/wwancfg.dll
windows11-21h2-x64
1Analysis
- max time kernel
432s - max time network
436s - platform
windows11-21h2_x64 - resource
win11-20240802-en - resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system - submitted
29/08/2024, 18:05
Static task
static1
Behavioral task
behavioral1
Sample
Solara.zip
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
Password - github.txt
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
Solara/Debug/Addition.dll
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
Solara/Debug/Autoupdater.ini
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
Solara/Debug/DebugPPF.tmp
Resource
win11-20240802-en
Behavioral task
behavioral6
Sample
Solara/Debug/DebugPPT.tmp
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
Solara/Debug/Helper.dll
Resource
win11-20240802-en
Behavioral task
behavioral8
Sample
Solara/Debug/Management.log
Resource
win11-20240802-en
Behavioral task
behavioral9
Sample
Solara/Debug/Resource.dll
Resource
win11-20240802-en
Behavioral task
behavioral10
Sample
Solara/Debug/main.ini
Resource
win11-20240802-en
Behavioral task
behavioral11
Sample
Solara/Debug/ukm_db
Resource
win11-20240802-en
Behavioral task
behavioral12
Sample
Solara/Packaged/Main.xml
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
Solara/Packaged/Resource.dll
Resource
win11-20240802-en
Behavioral task
behavioral14
Sample
Solara/Packaged/Utils.xml
Resource
win11-20240802-en
Behavioral task
behavioral15
Sample
Solara/Solara.exe
Resource
win11-20240802-en
Behavioral task
behavioral16
Sample
Solara/accessibilitycpl.dll
Resource
win11-20240802-en
Behavioral task
behavioral17
Sample
Solara/buffed/chidedOcurred.xml
Resource
win11-20240802-en
Behavioral task
behavioral18
Sample
Solara/buffed/decineSatoriiCoppy.xml
Resource
win11-20240802-en
Behavioral task
behavioral19
Sample
Solara/buffed/ecocide.xml
Resource
win11-20240802-en
Behavioral task
behavioral20
Sample
Solara/buffed/gheddaOptimal.xml
Resource
win11-20240802-en
Behavioral task
behavioral21
Sample
Solara/buffed/pickup.xml
Resource
win11-20240802-en
Behavioral task
behavioral22
Sample
Solara/buffed/pictaviSina.xml
Resource
win11-20240802-en
Behavioral task
behavioral23
Sample
Solara/oleprn.dll
Resource
win11-20240802-en
Behavioral task
behavioral24
Sample
Solara/wwancfg.dll
Resource
win11-20240802-en
General
- Target Solara/Debug/Management.log
- Size 8KB
- Sample240829-wpnbcawcmp
- SHA256 4dd051de9b04902fc59d411b1c27c42007cacca4ea52e88d71c897cad1d990cc
- MD5 ff765d6581fe6568aaae19de239b2e7a
- SHA1 78b09b0ce2e59ce87f65251ea903842c1c77046a
- SHA512 8fa7c766fc1ac48408d964eb9844f9c4a2fb3e33357e736230024788ec71cb3c338397e16f8e556bbcaafd83c58f3af6a55ceaa9daff290b0e687093e5c97a2e
- SSDEEP 192:+jfkNaok8wITITp8dNOgNH34lxeDKOgWNh0ctcoAd8dq5XrOGB3Wr:UkNaz8wWWp8dMA34lbLsq5Xqq3a
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1287768749-810021449-2672985988-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1287768749-810021449-2672985988-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2364 OpenWith.exe