1589c4ca9b12b0666fa61418fe7d891f1d1441e1e55739626b4df6a2e2a67ec7

General

Target
SoloPic-1.0.0-windows-x64-portable.zip
Size 11.0MB
Sample260705-ws2cdaav6q
SHA256 1589c4ca9b12b0666fa61418fe7d891f1d1441e1e55739626b4df6a2e2a67ec7
MD5 9a9caf4444c46621ceb149157592deb4
SHA1 8f13f954482413da2a508e73edfafb540e85450b
SHA512 7a066b8b12588372bc5fbb0d1c20de21b53695562719ba307e13d74f5a1a36f9d6f7ac7788c8fe1e16782a00523f478183fff00e00fae1262c079342fc30a9d2
SSDEEP 196608:LDToT0qTNSOc4Is4bwRZJ6PD3qXWfbJ83hgziKUiA9Jf7T3+iHaW6E0Y6O8OqxHx:L7+p7HZIzqXO83qiLiWJH359Dpcx
TLSH
T1BFC633E06D59E5B761DC92BFEE70A21C84FAE048F5E7669C72704083BAC1154E4FCDA8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  SoloPic.exe
- Size 14.2MB
- SHA256 a08fa8095edee6938909ade7a91c47ee0b9b6f07780967fde0add35ecab3bd18
- MD5 31581eacbb480dd71f20f52cb79f9c5e
- SHA1 af5f9a12bed2227f69a915468e4cfa795b7fb91b
- SHA512 7096806e1e370948fa0d27596722abe6b4226f4e308eaae189eaecc00839bc06808e1af4c4637b5bcbae42955fbd7e428feb210940a3a7094e3988cc35becf96
- SSDEEP 98304:roQdW1CdM3uyWbmfhQGOyt+Hd0HJpty30fgvbGhvTCFWENSjSPmAsgmoAKL88n0:0Cy3OmfhQv0E0ovK/EqS4KLzn0
- TLSH
  T1DEE61A06AA6B99ACD55AC870C3574B735E2134CF0A36B9BF41C452383F6DBE06F28719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  pic-mcp.exe
- Size 7.8MB
- SHA256 cabcc7cb1fddd62721f2a08d49c7a347528b90d4c8b10c11ebfeb0018e4c537e
- MD5 fa9c41d821071101e5b02689cb2f96d9
- SHA1 324a4e96b18afaae5db90f6ac788ab853c3edeee
- SHA512 ee4f314eb676412eb3f4b40cf777380cce2069d62121fc4f98c29dbdea303f00ad94ee52451652791aeb86f05b9332f973ad52cc3f965b9b5139061d05a97854
- SSDEEP 98304:OgtNTQ/o1D02Uh7aIyNJU20+YWQNlmNLE9cSUXb+e:02UFaXslGE9sX
- TLSH
  T126863A02FAAB98ACC456C4B4C7575B636E3134CF0726B9FF42D452343F69BA06E28B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  pic.exe
- Size 6.4MB
- SHA256 cbffd86da7b3073754c95067ad85c5750f1412620b955060117177b41589435f
- MD5 0f9bd2de58e519cf0290a77aaca0b17c
- SHA1 d1372f69ffff1ebdd5592c8d2775f692116bc14f
- SHA512 0bce9da61ec05b359cf0f7bab5160b29a725018ecd22743966061d56594a7aedd82d199ed25ffdaa4919af0a63e5ab9cc4cac6e008ebad929935a92d6623b2b7
- SSDEEP 98304:XsWey+4d2vE2oQZW2E9tpkYrp/hztx9Lu:12Xoskt/nxh
- TLSH
  T1C7664B06F6BB98ACC856C4B4C7675B636E3134CE07257AFF42C492343F69BE05A28B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6