Extracted

• • Target

    Solara/Solara.exe

  • Size

    45KB

  • MD5

    901df622f506e27fd108384fffb83510

  • SHA1

    e716f966a198966198ce6a2d8b9960a46a3fe1d0

  • SHA256

    636403362b6d2e74f170a1c736920b4f0757148ab9c2b9c94a27f0ba178b2361

  • SHA512

    2b781377d8e205dfc86d019dc17e661e58a142a37d2b4fe30549ad369c3cc4b9690a796495081703df0e3bccc7c6e0be085b9558af277d26313409b22f2ed9da

  • SSDEEP

    768:qdhO/poiiUcjlJInAylF2I8H9Xqk5nWEZ5SbTDa4uI7CPW5A:Mw+jjgnvlF2I8H9XqcnW85SbT1uIY

  Score

  10^/10

  xenoratdiscoveryrattrojan

  • Detect XenoRat Payload

  • XenorRat

    XenorRat is a remote access trojan written in C#.

    trojanratxenorat

  • Xenorat family

    xenorat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2