Overview

overview

10

Static

static

10

Solara/Solara.exe

windows7-x64

10

Solara/Solara.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Solara.rar

  • Size

    19KB

  • MD5

    d2e7b5441ca50d8484902c70cfab0633

  • SHA1

    2205a88efae8d741d6fd15468f3f450fc7aef5c4

  • SHA256

    478bdd7840cf305e0e2d6bf92df1fd60093a8aa9abe7138192baa928ef534782

  • SHA512

    513e5cd27087139eb457066205aca485123d6abcef20566c2d8bdd016f47c618ed1aabc8eae9e82f9fec56d6bb4f1233ad6b6557155a624d619dcdecbbca0ff4

  • SSDEEP

    384:MvtWzqM93GrEsd+WtFkOTnomVqS2esfrXhLgWCncrJCiTZp3xWar7:MvtkLuExW3GmVkDhYcVCi7h

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

192.168.1.6

Mutex

Roblox_service

Attributes
  • delay

    5000

  • install_path

    appdata

  • port

    49281

  • startup_name

    Solara.exe

Signatures

  • Detect XenoRat Payload 1 IoCs
  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Solara.rar
    .rar

    Password: Solara

  • Solara/Solara.exe
    .exe windows:4 windows x86 arch:x86

    Password: Solara

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections