Overview

overview

10

Static

static

10

Solara.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Solara.exe

  • Size

    44KB

  • MD5

    2d77b2cc88d69fbae3a3b7d5f89e1de2

  • SHA1

    09cf5e15b06a5b962247b45807594808a66e38c8

  • SHA256

    2208d8cec15b9f5cb0d2633a9fa0761120a6432927b1401c0683df982f00205a

  • SHA512

    f890a7a0c009a2edab6c134b51e813a97697193c3a4c47de3f8a4eb2c635444cf178f0f36b7343db79d54dd95d449bbec63957e83c40b83af2d75168f6863aac

  • SSDEEP

    768:qNTRmetisWt2tKdouL3ZE9R9yFRPG9XZVkw6OOChDsGO6Mi1:qNTketz8npE92Fw9Xvkw6OOCdVO9i1

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

AXTHi4CYiQFk7lUs

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

  • pastebin_url

    https://pastebin.com/raw/FgmKAhUD

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Solara.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections