Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Solara Executor.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Solara Executor.exe

  • Size

    332KB

  • MD5

    bc24fa47ce8a3cc610815ead257083a9

  • SHA1

    cac1b95cd01cdf9e5df3152aacb70a4ebbc0e614

  • SHA256

    36f0ee74a035c4f57825d0032802971e5a09b79e7e6eed92521b5af93277025d

  • SHA512

    4bc7f17a381a8995c660223dc315411d240493bdbcaabbd426b0f78e3c28ef7fc89a5d02dcf46e87e6ef7a3fc3647e8e4f29dd1bab84408718d12d0046c371ed

  • SSDEEP

    6144:dTRmMwn7bMPl/ioSsPTy3gJckDCO5+Pl+bs:dTRmMw8NzSsPTywWQ+Ples

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:2277

192.168.1.62:2277

80.46.100.166:2277
Attributes
  • Install_directory

    %AppData%

  • install_file

    Realtek Host Proccesser.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Solara Executor.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections