Static task
static1
Behavioral task
behavioral1
Sample
SolaraV3.lnk
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
SolaraV3/Bootstrapper.exe
Resource
win11-20240802-en
General
-
Target
SolaraV3.zip
-
Size
276KB
-
MD5
0bc4e2e082dbb2791353f6aa163c7a26
-
SHA1
01c6564e8042d1efb95a898154324db0da8f0a0c
-
SHA256
6d85625bb27a1c02822a677e70838bace95a88706396640b33ee2a1000d24c93
-
SHA512
8c54850fa407de59ca86a75275fb68e051a76c70e1e79600e50760c3ba7ffd612a86bb8fda259b1dea5ee9d17d7ea6163765002b11da0c2188531776b7cbe96d
-
SSDEEP
6144:QsrC8ZTEzg7zoEbAIy/6GfnsAc1WHJoSINYAshIyD5k+b:QsmoTEuULS+S10JoS0GhIyD5t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SolaraV3/Bootstrapper.exe
Files
-
SolaraV3.zip.zip
-
SolaraV3.lnk.lnk
-
SolaraV3/Bootstrapper.exe.exe windows:4 windows x64 arch:x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 793KB - Virtual size: 793KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Инструкция .txt