Overview
overview
9Static
static
9Solaًra.zip
windows11-21h2-x64
3Solara/bin...pl.pak
windows11-21h2-x64
3Solara/bin...BR.pak
windows11-21h2-x64
3Solara/bin...PT.pak
windows11-21h2-x64
3Solara/bin...ro.pak
windows11-21h2-x64
3Solara/bin...ru.pak
windows11-21h2-x64
3Solara/bin...sk.pak
windows11-21h2-x64
3Solara/bin...sl.pak
windows11-21h2-x64
3Solara/bin...sr.pak
windows11-21h2-x64
3Solara/bin...sv.pak
windows11-21h2-x64
3Solara/bin...sw.pak
windows11-21h2-x64
3Solara/bin...ta.pak
windows11-21h2-x64
3Solara/bin...te.pak
windows11-21h2-x64
3Solara/bin...th.pak
windows11-21h2-x64
3Solara/bin...tr.pak
windows11-21h2-x64
3Solara/bin...uk.pak
windows11-21h2-x64
3Solara/bin...ur.pak
windows11-21h2-x64
3Solara/bin...vi.pak
windows11-21h2-x64
3Solara/bin...CN.pak
windows11-21h2-x64
3Solara/bin...TW.pak
windows11-21h2-x64
3Solara/bin...le.txt
windows11-21h2-x64
3Solara/bin...et.txt
windows11-21h2-x64
3Solara/bin...le.txt
windows11-21h2-x64
3Solara/bin..._1.txt
windows11-21h2-x64
3Solara/bin..._2.txt
windows11-21h2-x64
3Solara/bin...le.txt
windows11-21h2-x64
3Solara/bin...le.txt
windows11-21h2-x64
3Solara/bin...tefile
windows11-21h2-x64
1Solara/bin...le.txt
windows11-21h2-x64
3Solara/bin...LL.txt
windows11-21h2-x64
3Solara/bin..._FE.iy
windows11-21h2-x64
3Solara/bin...s.json
windows11-21h2-x64
3Analysis
-
max time kernel
434s -
max time network
1155s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
24-09-2024 08:46
Behavioral task
behavioral1
Sample
Solaًra.zip
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
Solara/bin/locales/pl.pak
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
Solara/bin/locales/pt-BR.pak
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
Solara/bin/locales/pt-PT.pak
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
Solara/bin/locales/ro.pak
Resource
win11-20240802-en
Behavioral task
behavioral6
Sample
Solara/bin/locales/ru.pak
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
Solara/bin/locales/sk.pak
Resource
win11-20240802-en
Behavioral task
behavioral8
Sample
Solara/bin/locales/sl.pak
Resource
win11-20240802-en
Behavioral task
behavioral9
Sample
Solara/bin/locales/sr.pak
Resource
win11-20240802-en
Behavioral task
behavioral10
Sample
Solara/bin/locales/sv.pak
Resource
win11-20240802-en
Behavioral task
behavioral11
Sample
Solara/bin/locales/sw.pak
Resource
win11-20240802-en
Behavioral task
behavioral12
Sample
Solara/bin/locales/ta.pak
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
Solara/bin/locales/te.pak
Resource
win11-20240802-en
Behavioral task
behavioral14
Sample
Solara/bin/locales/th.pak
Resource
win11-20240802-en
Behavioral task
behavioral15
Sample
Solara/bin/locales/tr.pak
Resource
win11-20240802-en
Behavioral task
behavioral16
Sample
Solara/bin/locales/uk.pak
Resource
win11-20240802-en
Behavioral task
behavioral17
Sample
Solara/bin/locales/ur.pak
Resource
win11-20240802-en
Behavioral task
behavioral18
Sample
Solara/bin/locales/vi.pak
Resource
win11-20240802-en
Behavioral task
behavioral19
Sample
Solara/bin/locales/zh-CN.pak
Resource
win11-20240802-en
Behavioral task
behavioral20
Sample
Solara/bin/locales/zh-TW.pak
Resource
win11-20240802-en
Behavioral task
behavioral21
Sample
Solara/bin/workspace/.tests/appendfile.txt
Resource
win11-20240802-en
Behavioral task
behavioral22
Sample
Solara/bin/workspace/.tests/getcustomasset.txt
Resource
win11-20240802-en
Behavioral task
behavioral23
Sample
Solara/bin/workspace/.tests/isfile.txt
Resource
win11-20240802-en
Behavioral task
behavioral24
Sample
Solara/bin/workspace/.tests/listfiles/test_1.txt
Resource
win11-20240802-en
Behavioral task
behavioral25
Sample
Solara/bin/workspace/.tests/listfiles/test_2.txt
Resource
win11-20240802-en
Behavioral task
behavioral26
Sample
Solara/bin/workspace/.tests/loadfile.txt
Resource
win11-20240802-en
Behavioral task
behavioral27
Sample
Solara/bin/workspace/.tests/readfile.txt
Resource
win11-20240802-en
Behavioral task
behavioral28
Sample
Solara/bin/workspace/.tests/writefile
Resource
win11-20240802-en
Behavioral task
behavioral29
Sample
Solara/bin/workspace/.tests/writefile.txt
Resource
win11-20240802-en
Behavioral task
behavioral30
Sample
Solara/bin/workspace/EzHubLL.txt
Resource
win11-20240802-en
Behavioral task
behavioral31
Sample
Solara/bin/workspace/IY_FE.iy
Resource
win11-20240802-en
Behavioral task
behavioral32
Sample
Solara/bin/workspace/Sky Hub/Sky Hub Settings.json
Resource
win11-20240802-en
General
-
Target
Solara/bin/locales/tr.pak
-
Size
541KB
-
MD5
4816b231ae19e0558da93ca38732180c
-
SHA1
7492c9112e8223bbb3a00ab0a7b4d656202aab09
-
SHA256
1348292fdf4cc58061eba3c5a79120b079d89ad8a0fb0ed5949198aa7f28c134
-
SHA512
908ce66d373a5f9e4aece69779dd7c9a9575abbf9ddf307e96c2dd112e2b73073ef422db845e2dac8f102235c047d6e665378491a7ee6f28b1f1e9325a231127
-
SSDEEP
6144:cftvc5tyeeM8Sc7RtRYhsRzOBqgdkA4ZNcDxzXpKTMjOqAVXgl49gl5HOJ8+zi1Y:acsMVqRtRYhUzGqYwNuCTglt5HOJH
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000_Classes\Local Settings cmd.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2916 OpenWith.exe
Processes
Network
-
Remote address:8.8.8.8:53Request89.16.208.104.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestctldl.windowsupdate.comIN AResponsectldl.windowsupdate.comIN CNAMEctldl.windowsupdate.com.delivery.microsoft.comctldl.windowsupdate.com.delivery.microsoft.comIN CNAMEwu-b-net.trafficmanager.netwu-b-net.trafficmanager.netIN CNAMEwu.azureedge.netwu.azureedge.netIN CNAMEwu.ec.azureedge.netwu.ec.azureedge.netIN CNAMEbg.apr-52dd2-0503.edgecastdns.netbg.apr-52dd2-0503.edgecastdns.netIN CNAMEhlb.apr-52dd2-0.edgecastdns.nethlb.apr-52dd2-0.edgecastdns.netIN CNAMEcs11.wpc.v0cdn.netcs11.wpc.v0cdn.netIN A93.184.221.240
-
Remote address:8.8.8.8:53Request240.221.184.93.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request25.140.123.92.in-addr.arpaIN PTRResponse25.140.123.92.in-addr.arpaIN PTRa92-123-140-25deploystaticakamaitechnologiescom