Overview
overview
10Static
static
3Solara.zip
windows7-x64
1Solara.zip
windows10-2004-x64
1Password - github.txt
windows7-x64
1Password - github.txt
windows10-2004-x64
1Solara/Deb...on.dll
windows7-x64
1Solara/Deb...on.dll
windows10-2004-x64
1Solara/Deb...er.ini
windows7-x64
1Solara/Deb...er.ini
windows10-2004-x64
1Solara/Deb...PF.tmp
windows7-x64
3Solara/Deb...PF.tmp
windows10-2004-x64
3Solara/Deb...PT.tmp
windows7-x64
3Solara/Deb...PT.tmp
windows10-2004-x64
3Solara/Deb...er.dll
windows7-x64
1Solara/Deb...er.dll
windows10-2004-x64
1Solara/Deb...nt.log
windows7-x64
1Solara/Deb...nt.log
windows10-2004-x64
1Solara/Deb...ce.dll
windows7-x64
1Solara/Deb...ce.dll
windows10-2004-x64
1Solara/Debug/main.ini
windows7-x64
1Solara/Debug/main.ini
windows10-2004-x64
1Solara/Debug/ukm_db
windows7-x64
1Solara/Debug/ukm_db
windows10-2004-x64
1Solara/Pac...in.xml
windows7-x64
3Solara/Pac...in.xml
windows10-2004-x64
1Solara/Pac...ce.dll
windows7-x64
1Solara/Pac...ce.dll
windows10-2004-x64
1Solara/Pac...ls.xml
windows7-x64
3Solara/Pac...ls.xml
windows10-2004-x64
1Solara/Solara.exe
windows7-x64
10Solara/Solara.exe
windows10-2004-x64
10Solara/acc...pl.dll
windows10-2004-x64
1Solara/buf...ed.xml
windows7-x64
3Analysis
-
max time kernel
124s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
02-09-2024 17:37
Static task
static1
Behavioral task
behavioral1
Sample
Solara.zip
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Solara.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Password - github.txt
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Password - github.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Solara/Debug/Addition.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Solara/Debug/Addition.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Solara/Debug/Autoupdater.ini
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Solara/Debug/Autoupdater.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Solara/Debug/DebugPPF.tmp
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Solara/Debug/DebugPPF.tmp
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Solara/Debug/DebugPPT.tmp
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Solara/Debug/DebugPPT.tmp
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Solara/Debug/Helper.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Solara/Debug/Helper.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Solara/Debug/Management.log
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
Solara/Debug/Management.log
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Solara/Debug/Resource.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Solara/Debug/Resource.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Solara/Debug/main.ini
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
Solara/Debug/main.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Solara/Debug/ukm_db
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
Solara/Debug/ukm_db
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Solara/Packaged/Main.xml
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Solara/Packaged/Main.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Solara/Packaged/Resource.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Solara/Packaged/Resource.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Solara/Packaged/Utils.xml
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
Solara/Packaged/Utils.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Solara/Solara.exe
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Solara/Solara.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Solara/accessibilitycpl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral32
Sample
Solara/buffed/chidedOcurred.xml
Resource
win7-20240729-en
General
-
Target
Solara/Debug/Management.log
-
Size
8KB
-
MD5
ff765d6581fe6568aaae19de239b2e7a
-
SHA1
78b09b0ce2e59ce87f65251ea903842c1c77046a
-
SHA256
4dd051de9b04902fc59d411b1c27c42007cacca4ea52e88d71c897cad1d990cc
-
SHA512
8fa7c766fc1ac48408d964eb9844f9c4a2fb3e33357e736230024788ec71cb3c338397e16f8e556bbcaafd83c58f3af6a55ceaa9daff290b0e687093e5c97a2e
-
SSDEEP
192:+jfkNaok8wITITp8dNOgNH34lxeDKOgWNh0ctcoAd8dq5XrOGB3Wr:UkNaz8wWWp8dMA34lbLsq5Xqq3a
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 5092 NOTEPAD.EXE
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Solara\Debug\Management.log1⤵
- Opens file in notepad (likely ransom note)
PID:5092
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4160,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=3812 /prefetch:81⤵PID:3984