Static task
static1
Behavioral task
behavioral1
Sample
SolaraB V3.131/BootstrapperV1.23.exe
Resource
win11-20241007-es
Behavioral task
behavioral2
Sample
SolaraB V3.131/workspace/VASL.js
Resource
win11-20241007-es
General
-
Target
SolaraB V3.131.rar
-
Size
400KB
-
MD5
bf2419a8779a2e418368e059d7afbac2
-
SHA1
f2c8042e7f176016078ac6b8f396b5936cb18bef
-
SHA256
1a9f40fdac5720f057a6581a18a08ca815b525f4cb10b41271fa46fb3631c7f7
-
SHA512
3d3c14ad42313ca625a3c04ad3fa554e2e38395f8e9e335ae2cd62c60f70400bb87f7039edfc45a2c89f989d68b373998f1c74d6441056538c57cd07ed97e48d
-
SSDEEP
12288:dJrDd1RJhYZxebiWhHyGuKgNJZmvbk/DQ:jrp1zMxCi+x3gjZmKQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SolaraB V3.131/BootstrapperV1.23.exe
Files
-
SolaraB V3.131.rar.rar
-
SolaraB V3.131/BootstrapperV1.23.exe.exe windows:4 windows x64 arch:x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 797KB - Virtual size: 797KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SolaraB V3.131/DISCORD
-
SolaraB V3.131/workspace/Goomba Hub/7331789373/5750914919.json
-
SolaraB V3.131/workspace/IY_FE.iy
-
SolaraB V3.131/workspace/NotSameServers.json
-
SolaraB V3.131/workspace/ProjectAuto/AutoRobV05/Configs/default.txt
-
SolaraB V3.131/workspace/VASL-Version.lua
-
SolaraB V3.131/workspace/VASL.lua.js