Analysis
- user interaction
yes - max time kernel
270s - max time network
269s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
05/05/2026, 03:51
General
- Target solara.exe
- Size 8.3MB
- Sample260505-eepb8abz2l
- SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
Malware Config
Signatures
- Modifies system certificate store 2 TTPs 5 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\solara.exe"C:\Users\Admin\AppData\Local\Temp\solara.exe"1⤵
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5076-0-0x0000029CDE170000-0x0000029CDE9B6000-memory.dmp
memory/5076-1-0x0000029CF9010000-0x0000029CF9020000-memory.dmp
memory/5076-2-0x0000029CF9010000-0x0000029CF9020000-memory.dmp
memory/5076-3-0x0000029CDEDD0000-0x0000029CDEDE0000-memory.dmp
memory/5076-4-0x0000029CF9020000-0x0000029CF9028000-memory.dmp
memory/5076-5-0x0000029CF9010000-0x0000029CF9020000-memory.dmp
memory/5076-6-0x0000029CF9A00000-0x0000029CF9A38000-memory.dmp
memory/5076-7-0x0000029CF99C0000-0x0000029CF99CE000-memory.dmp
memory/5076-14-0x0000029CF9010000-0x0000029CF9020000-memory.dmp
memory/5076-15-0x0000029CF9010000-0x0000029CF9020000-memory.dmp
memory/5076-16-0x0000029CDED50000-0x0000029CDED5C000-memory.dmp
memory/5076-17-0x0000029CF8EC0000-0x0000029CF8F8D000-memory.dmp
memory/5076-18-0x0000029CF9010000-0x0000029CF9020000-memory.dmp