dd8ab0629dd7f4fe57d6843e4101f6c5bb1291e490b0637b75b1d8f05da98bdc

Sharing

Copy URL Twitter E-mail

General

Target
Solara.Dir.zip
Size 12.0MB
Sample260418-wrpl7adv4x
SHA256 dd8ab0629dd7f4fe57d6843e4101f6c5bb1291e490b0637b75b1d8f05da98bdc
MD5 e8d6cab4ef258575ef3dbfe39dd1e2ed
SHA1 7e7761877ba2dbdb9f1bb798a8612eebf6d1ca20
SHA512 5f4535ca653382f2e8e1ba5e52cd1351e137c415d80cdfe59fd304df696ed4bb9a46dff352bbfe261a127c381a068e4e227f7377a34d3e4aed1f2a930a82dcd6
SSDEEP 393216:6yO78DAHF2fXg6L/1onD7BjIbOLoQDsPyS6J0Q:QgAHF2ftJonfB8s9sPySw0Q
TLSH
T151D6331BD4BC2613CF5FB27B714BCF48755E62EE610ABA061ACC430639670E419BE1AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Solara/Microsoft.Web.WebView2.Core.dll
- Size 634KB
- SHA256 2b999d1775004e98b32f281f4518f3952df650970748527ef5b54fa9979d6c9c
- MD5 225af3c55fbb7376a11dbc4648a2b582
- SHA1 89f5657f8bca7aa571d7b533933dd3ffe744fcdf
- SHA512 6e550daad83e85a189a6709e4757ee8caa27604362be9945cddf1a5a59aaff0f68403255422e243a7aaa2e0fea28c6972187be72b9eb82b76a4523ba3a49aad0
- SSDEEP 12288:6BfVnfFe7bqOarD6niWFynSbOR4qn7BdkJX1Il5g3dM6sq9cZwq4BTpsRkrP322i:GQcl41OZ
- TLSH
  T1D3D4532223FD4619F6F27FB9563817608FB9BC96B939D35E8598502D0D72B809DA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Solara/Microsoft.Web.WebView2.WinForms.dll
- Size 38KB
- SHA256 bbc50575b6a191fd433df854227921937f256e91a81b47c697d95ea8ed027ff6
- MD5 1c42da9957dad375688d998aed3b643e
- SHA1 071585c1af48e621fb88c72588910e6ade6f9b3b
- SHA512 1b0a87c3ba81a4252e389c2ec392c1265e429ed85a50952f30340afe3cf1e634685390e7f307f55fd8f8255e1f002c6f8370430a0c0ed2cc46cfdbdc0710c2c2
- SSDEEP 768:HyQNb2vIYymJ22Mss+5lQ+ZDgcEST3p4Jjrjh2jeFSUyauTv1JKia5/Zi/ZGQSxm:HVb2vLblQ+ZDgcEST3p4JjrjaeFSUya6
- TLSH
  T15D033A4087ECC517E6EB2E78B9B491611BBA7EC37DA1D3A90C84F1E90C73B9055143AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Solara/Microsoft.Web.WebView2.Wpf.dll
- Size 80KB
- SHA256 6d329162b460515a849c693518ff626a1a3363e79d549cfd6822e5601f24603e
- MD5 d8e466f3951eb9a3d22eb098f4cced13
- SHA1 8db2e9b72d72ee13c2059371a0b3026137118b7c
- SHA512 6ea9f0ce48f5e3b31465e7dd6e7e808d590933d99242e040c28b260f9124b0f3662d7e7356798f7e9eb09120ec3900cf98277e315a783c07cacce93ce1d0fde1
- SSDEEP 1536:aU8jJ30lsivLfCoiWqhxaRkPqsfha87Y1DHfF7yEW30bpc4Jjr4YeUq+HhxU0udr:hs+vLqrThx6spa8+DHfFy30bpc4Jjr4B
- TLSH
  T109836C8193AC8923CBEF1FFD7C6050140FB8FA83B652D7992985B5EC0DA379119197A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Solara/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Solara/SLaunch.exe
- Size 245KB
- SHA256 fe4e2de98a58a3d67785c9ae2343ba34f3207a2a77fe21c88c1a5488acc02d22
- MD5 a05992c20a823307544a9840a8ffed4d
- SHA1 e85cda936c5ce601da7d57e547751be93aaf5ad4
- SHA512 338ed0c985f36f72fe2411f66d4e75465b7743373d9e292bef33f89f753584e379ba957af1c62ddca95d385255f44f274f069fe7a2e2b6f7b23303361097abee
- SSDEEP 3072:bNwrkXnZkTZfGK3uhMhXktRo8LeReUZqCZKl1Q:BJ8ZgyiLTEmQ
- TLSH
  T18A349F13A6EC3CEAD03A8730B77747C0DB2EEC655391D58E42D006A68A7E5937E267D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Solara/Solara.exe
- Size 1.3MB
- SHA256 473032c443307738fa01a2dc1d636c81f7b2def5d48d0dde91b0b896230bc83b
- MD5 312746de805dc64b1ab7fcf9f4c0f1ec
- SHA1 23f28f0abc2227177f8fce565c02ec2f50ec744b
- SHA512 85e17706968dfa10148060957a4098df6ba91b73d6f148255352838792dcd4102bcd1ce0aaeb321c429bae816f36e6ee16549c6105ee8495cbd54c6e68f697cf
- SSDEEP 24576:kVyuDb36T6hkReLXUJWpQ+NGkIAm1/Q3QQl:kAjkIAm1W
- TLSH
  T17455E242A2C6FD1BD3362A358594F32D89257F31EEA6930B30BD35AC553BBAD8449343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery spyware trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral11 behavioral12
- Target
  Solara/SolaraV3.dll
- Size 14.0MB
- SHA256 2985aeb3707505433f1a37ca5d75ac305967e6dd8478d53fe56312d8acc7e14c
- MD5 16845f388bc9decbfa0cec6f21b47a30
- SHA1 9d40b55c3dc7eff648c2b70147b50c9933d37f03
- SHA512 e4698723c0fa10d1aec780c1785f95daabd332f3132078f42336fbab09f4c371c2496d4aeacbc12e76f3e4532ce4645c9528ef658ef80ffce4852bcf9eb168d6
- SSDEEP 393216:5xepwiY1bGrojaDXP700yXR+YxjfXyPFhVHhiZ:5QpwL1UJM
- TLSH
  T1B1E69DD760D811D9C47AC1798747A93BC2AF783583349AE7239496B60F23ED43A7AF01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral13 behavioral14
- Target
  Solara/WebView2Loader.dll
- Size 133KB
- SHA256 79d7e45f8631e8d2541d01bfb5a49a3a090be72b3d465389a2d684680fee2e36
- MD5 a0bd0d1a66e7c7f1d97aedecdafb933f
- SHA1 dd109ac34beb8289030e4ec0a026297b793f64a3
- SHA512 2a50ae5c7234a44b29f82ebc2e3cfed37bf69294eb00b2dc8905c61259975b2f3a059c67aeab862f002752454d195f7191d9b82b056f6ef22d6e1b0bb3673d50
- SSDEEP 3072:e5i6Uab3sFhPk6vEmG1PU6dLXm2ng3esQDqEt2JljdTu:e5P2e6vERtUyTmHEtmI
- TLSH
  T13FD35B5B73A5007BE1778174C4A34A1AEB76B85117609BDF07A442692F63BD0AE3EF30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Solara/Wpf.Ui.Abstractions.dll
- Size 16KB
- SHA256 97d4870a394bc0f916c1e347fedc44fca5c623ce771ae7d57d6850cff05a7421
- MD5 f2e21fd54226495bf3094bb7a3b317ed
- SHA1 e4446ddee38178e96b6b185dcba7b7100398b882
- SHA512 bd50cc6dc257441e0b74b7868b4011b050adb290a7bc2a4def51f29c8244617f59e8c9c3b5faf11089f5bfe9e86337c7064479ab314f12552a63a3e824e54350
- SSDEEP 192:HWJTHp66tO7Qg/RRbf/KDDwHXvMnA+BRVGA1DmgIH1uokrGF7Fb4YRmtZX+iS6q5:29I/RRb/KDDwH/B+3DgUv0JHb7
- TLSH
  T11772076ED36C53B3DF6B06B0F83A21511A76E24C3603E6BF5648D54A4F5AB890432772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Solara/Wpf.Ui.dll
- Size 5.7MB
- SHA256 0ebff5461eb1984ea852566a59f08456e48909f4ea9b7ec064a219a28ece0343
- MD5 1aa1a40418717dc04ada47b52a1c06ed
- SHA1 4efd1787373497fe819116e2c0e81e2463cc1052
- SHA512 14d632d1dbf77d4a11d21c2314a07faeaebbce3f257e36d79c63becc29b16cacd09e8b7928d79742c1ef346576134c589ece3af8d80e49def36b865cdd9b7ca8
- SSDEEP 98304:1OYON/XzMvSmaRT+KcbNdvPp4zlAHDfyNr7lQ:/O9oNdvPpR
- TLSH
  T1BE565B9E23ED0D33D363837A8DA07323196919652142AF878F4ADB2D44BA0C5DDF16DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Solara/vcruntime140.dll
- Size 99KB
- SHA256 7d7ca28235fba5603a7f40514a552ac7efaa67a5d5792bb06273916aa8565c5f
- MD5 7a2b8cfcd543f6e4ebca43162b67d610
- SHA1 c1c45a326249bf0ccd2be2fbd412f1a62fb67024
- SHA512 e38304fb9c5af855c1134f542adf72cde159fab64385533eafa5bb6e374f19b5a29c0cb5516fc5da5c0b5ac47c2f6420792e0ac8ddff11e749832a7b7f3eb5c8
- SSDEEP 1536:sC6b39cL/iRDhXq4GZLAy10i5XNC83tTPw98APXbxecbSQ25I4I/Cq:sVPphXq30yvXL5APbxecbSDu
- TLSH
  T118A35B4AB6A842B7D16AC170C0F35A47EB72B485873053CF03B98AA90F57BE15E3E355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Solara/zlib.dll
- Size 663KB
- SHA256 57d27814f4d95618584d26c8e37418b9dfe3f28423de6265f4c17de7948e69b9
- MD5 c5b29a2e334961e9dee00ab4726392e3
- SHA1 8f2043d03d0ff96a27cfce297f594afa87e79f2e
- SHA512 0393b0506ada43f7f7978c2f81da62521b3c0a43d04242676002da755bc51ea144047891b6ff3796e89b4079360ffb245793fed67e3741b4c3884cd48973a63f
- SSDEEP 12288:v0QF8ngPoGTct1aGQBJ4yysYZ22yViIwhOQF/tU/yfcqit5cJGBTcW14O/:vifUsyurO3cYTcS/
- TLSH
  T10BE40856D1F8CA96EE719135C2972E2EF3E4BD05137193539344466EBEA3B809B3B380
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Solara/zlib1.dll
- Size 113KB
- SHA256 945e7f5d09938b7769a4e68f4ef01406e5af9f40db952cba05ddb3431dd1911b
- MD5 75365924730b0b2c1a6ee9028ef07685
- SHA1 a10687c37deb2ce5422140b541a64ac15534250f
- SHA512 c1e31c18903e657203ae847c9af601b1eb38efa95cb5fa7c1b75f84a2cba9023d08f1315c9bb2d59b53256dfdb3bac89930252138475491b21749471adc129a1
- SSDEEP 3072:wsuxy/bjdeT1dtDCV8SSsfj7cTpHTBfQjxcHE2Fl:wsZ/bRe5PDCV8SLfcFTBIjxyE2Fl
- TLSH
  T11BB37B66F6A365EDC6B6817091EB5775F435F8210330AEBF6288E7701B12E506B0C2ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Network Share Discovery

Badlisted process makes network request

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26