General

  • Target

    solara.exe

  • Size

    41KB

  • MD5

    15a9c1e88def62ed4698653817dd49f3

  • SHA1

    4dcd814644624487523e4d9f05cfa7b44cc6a003

  • SHA256

    2442056a304a0c3f67a04a64a51e15b49cc056553f2b46efc74d412da334b8fa

  • SHA512

    e243b9ff72783dbbddaf699a5099afa5bfe9d99260845e825e1742e9a4405a123ca278b71cc365b865daa0915d9bde2b46c7b9440feb325ea6d94f8b2c8f70e3

  • SSDEEP

    768:jscaIiIqfT6ahzpDXswIuZkeMWTjNKZKfgm3EhkZ:4c1ofnhz8eMWTpF7EKZ

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1295103465751707828/Yi_BycNwaAuY9ggq6DYhG24Q1YQvFqUxF9LIwLGQqWVDfExKkVmWAtBgQq45qV5zVSOq

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • solara.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections