Static task
static1
Behavioral task
behavioral1
Sample
SolaraB.zip
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
SolaraB.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
SolaraB/BootstrapperV1.19.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
SolaraB/BootstrapperV1.19.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
SolaraB/DISCORD
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
SolaraB/DISCORD
Resource
win10v2004-20240802-en
General
-
Target
SolaraB.zip
-
Size
335KB
-
MD5
2d68c0db76ecfbbba956d00f8e145218
-
SHA1
a733f64e32cc4d2db0428c0cfb5d1cfef84adf7b
-
SHA256
41e2ca41f9d830720be3d35256603ac69455745e0554e84e7be9d4d880ac3332
-
SHA512
850cf8d7570c0d3672f3bfab8740ac9ae8236f236524e9a064d69f2eb440eee1146c96478afd49f2262083d54e93c3bb484e5b833a2dffefc646a99cee9e8d41
-
SSDEEP
6144:1cv0dmbJ7tFimFAuz86QZ1evD6SGwk06OIijv21LhRaOkLi0SyJB/Vht:1e0diZsMRBsYD6B0rI71Lh5ku0XB/Vht
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SolaraB/BootstrapperV1.19.exe
Files
-
SolaraB.zip.zip
-
SolaraB/BootstrapperV1.19.exe.exe windows:4 windows x64 arch:x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 970KB - Virtual size: 969KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SolaraB/DISCORD