Overview
overview
10Static
static
3Solara/Deb...on.dll
windows7-x64
1Solara/Deb...on.dll
windows10-2004-x64
1Solara/Deb...er.dll
windows7-x64
1Solara/Deb...er.dll
windows10-2004-x64
1Solara/Deb...ce.dll
windows7-x64
1Solara/Deb...ce.dll
windows10-2004-x64
1Solara/Pac...ce.dll
windows7-x64
1Solara/Pac...ce.dll
windows10-2004-x64
1Solara/Solara.exe
windows7-x64
10Solara/Solara.exe
windows10-2004-x64
10Solara/acc...pl.dll
windows10-2004-x64
1Solara/oleprn.dll
windows10-2004-x64
1Solara/wwancfg.dll
windows10-2004-x64
1General
- Target Solara.zip
- Size 11.4MB
- Sample240829-wras2atgra
- SHA256 1584752709b6b0c5cd83ed8d075a29915abadd32ffdd7c8974f45bb45e7aac40
- MD5 6aceff5f2f960a504898c91e2c13f907
- SHA1 4dfe9afc90bf8f1bf726b1f0be8e5120a8f390d6
- SHA512 079807d02985c5261548654f7318f6fb67ba78c790e9fdc3a77c1c02ba673fc56b30a70a55b40c8a824467e5d36d35c7fc39c76f739328a244b51137caf9f448
- SSDEEP 196608:+HWmlHe7xXtMZnwxG4wmtzfS33gnvfAe48WQ17bUGlgriBrxhNT/g3dbkHU5DBhn:+H7gx90ywmq3gvGQ1HUPri1xktbsUjV
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
Solara/Debug/Addition.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Solara/Debug/Addition.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Solara/Debug/Helper.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Solara/Debug/Helper.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Solara/Debug/Resource.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Solara/Debug/Resource.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Solara/Packaged/Resource.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Solara/Packaged/Resource.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Solara/Solara.exe
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Solara/Solara.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Solara/accessibilitycpl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
Solara/oleprn.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Solara/wwancfg.dll
Resource
win10v2004-20240802-en
Malware Config
Extracted
-
rhadamanthys
-
https://144.76.133.166:8034/5502b8a765a7d7349/k5851jfq.guti6
Targets
-
- Target Solara/Debug/Addition.dll
- Size 30KB
- SHA256 8be1f5581437b6f5ba48705e8956c8bc0765bbd1d6053242640c75bd94048aa9
- MD5 f22e849a370cdf127f48beab596bdd81
- SHA1 fb1da47c7a246f2cda7f7686a468efafd9933b1e
- SHA512 6ded81fe4d4db69586d74fdb425c4fc8c092508e7e0b49eb141a9045abf40626d14659fa6237a3920e58571ca7acf4911cdf03c4307fd89b6dc5e54172afbc14
- SSDEEP 768:Fol18SuOO3bBAughXjNPQsXVjWuu7jqWdTS2gS:er6tAugVjN4sXJYjqWdm2V
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Solara/Debug/Helper.dll
- Size 189B
- SHA256 6b325cadd8992d998c4fbc8ed56079c2850b68ea2d38432d51c26ce82b0a5419
- MD5 9bb9aba5dd893bbccfa45e2d75d55d26
- SHA1 5714796513341ac3159a6a3c23d4769209063d35
- SHA512 f57df9a4a02bd17772acb3ac1a0d961c53f6940600b58834ae38c198a98ae651a21b382450b267aeffbca4ab262668ae471a78ed99bf9dfa414c1316056a289b
- MD5 SHA1 SHA512
Score1/10 -
- Target Solara/Debug/Resource.dll
- Size 10.7MB
- SHA256 883aefb081a1f9ef974ceb16e12c215e92fee13531c052279404bd11b2f8e479
- MD5 641dadbb3f03938da99bf7c6c4cc482f
- SHA1 b21bdb69a17642ade8e62fcbd779ff1bc89ea809
- SHA512 7aea5f0db9b261a17801124d6eef0df2d3ada4a6f624c8f4f2ee519a61171a3f06de9032493e3309a1a982fd1218613dde73a942942df2a8ec367e7f66a531f5
- SSDEEP 196608:8B4DNtjVoWhIdAXplnpnh4uIKZ2K245peMKU3lRM9RVIO+QvSNG2uM+XGE4:04vWGIun1GKZ/2aZKU3lRvO+QvQgGP
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Solara/Packaged/Resource.dll
- Size 189B
- SHA256 a9661f89b8d957f4e71cbe1ba0342a39e5b50a1d80d974e2e1b349a273967f1b
- MD5 4427aeee68321d0f4d7befa74e669f83
- SHA1 4670003762a1c217c9e8ea48fcc53f2871a7c341
- SHA512 9d9156aa8fdebf19363fed2edb82235642c8c20549369470e44fdc0db41324e2160968fd7dd43eecce1ce3da9c03dd05cdefc8d903a9d0394f5ca9a73f5c5fa3
- MD5 SHA1 SHA512
Score1/10 -
- Target Solara/Solara.exe
- Size 433KB
- SHA256 cb6b38f445f334599088702569ed9c9d4b0a54c7c88097a16ec6e58055517a3c
- MD5 511f208e7b396defb7dce554e5d43ea4
- SHA1 890ab67abca71bd4785204cede30a39d5a168aef
- SHA512 32b4cdbc0c5b4205e0ec02a38dc5b6086b35388ec76aadfc6565497c2466bca1e4ecc601a581856078c77719131e6c19e867e59c038605e3a430dfc1e8f13ecd
- SSDEEP 12288:CCouY2+3Q1uRGysHZR0Ea6uatj8vxn8DDXOSb:vc1Q1pj5eEa6uS8ZnWX
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Suspicious use of SetThreadContext
-
- Target Solara/accessibilitycpl.dll
- Size 274KB
- SHA256 a28ef80b49f85f95f929d5c40245b05f95d58bb672764c3539ce69098db9bcc2
- MD5 f316026e08074300cbdcd8453bfd3116
- SHA1 c7494558e98e42930b83349ea816963147242fba
- SHA512 cb205111f99cdd4ab930644dfc910f82015175c452be330dcdbee3cff3a07234bf6e77c5967a33fb02ec0bdd993b96b19964160a5511dcfa684a77508aede047
- SSDEEP 6144:2f/fsr6htcMmmdxeAXXDoDGNIPTympgJp3P:O/fsr6hCtUxeLymW
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Solara/oleprn.dll
- Size 148KB
- SHA256 3e595c971729c2eb7879b6ce468d11e286ea98fa8c1abf93abbc5888542013d0
- MD5 e0f375597c9bc2d444be3dc6a65f06e9
- SHA1 11589152b702675bb211054020e33f2659c34842
- SHA512 0299035f227cf1285d1f149c5e67805d1f8c78469fd6fefdbc4616b3f555f7f52c8addc0dc004ce9971223a48892ce0ecee316e4d5dd6583a02093b7d8d866c0
- SSDEEP 3072:DcSblOUyLB7OCm6U0FRwOyu3tkdwdxyDhkpN0Fc:Dc+8UyLBOmrwOyVOl
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Solara/wwancfg.dll
- Size 103KB
- SHA256 c4b1f99e87b4568b5b9ff2ded05cebc55376051d44877f5574f2c125566ce604
- MD5 997b0b584ffab0b7ff9cbbfc60d60bd2
- SHA1 2985c0144da0e9f5dcc0092ac54a5ff99a63f761
- SHA512 b77553b7a2f5a55ad4dfa49f241961ddce650dd490f0b15b52dfc3c7018e2ba7d28f8387e150177ea3cf12c827afa7a2b7b9eec863199a829a11311bd9607b69
- SSDEEP 1536:IGYSem4xUPfgSD0B7+Kcdo5j0XNijwb8Pxsr8jtlelXLZpFtBH0:xYcpPfgSDWa3dJU88pNpUlXVXjH
- MD5 SHA1 SHA512 SSDEEP
Score1/10