f3bb5527dc2632f3fda0ba84a81dc3f4e6bed037e857afcced15491bd0a1c4d0

Sharing

Copy URL Twitter E-mail

General

Target
Solara.Dir.zip
Size 12.2MB
Sample260716-2d99maft2p
SHA256 f3bb5527dc2632f3fda0ba84a81dc3f4e6bed037e857afcced15491bd0a1c4d0
MD5 3e996c4357a36479675902889bc6960b
SHA1 db0882668647e687fabeb1add5a8881700155cce
SHA512 ddcee8663e884fdc7e4903a484ae99f95a56fedbe553b6f659feaf1491b7896631b8fa7954f98c6653c20f847715b7509c1d8d089da398902d1fb4261e05dae0
SSDEEP 393216:VUtyvUBJv0I6JgTujf8mbHxFBvmxGGyS6J0K:uCcvr6CujfhdeQGySw0K
TLSH
T121D63367D5A52A03CFCFF57B368BCF0EB8E6A69E0411ED090B9813453B5B0E4567928C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Solara.Dir.zip
- Size 12.2MB
- SHA256 f3bb5527dc2632f3fda0ba84a81dc3f4e6bed037e857afcced15491bd0a1c4d0
- MD5 3e996c4357a36479675902889bc6960b
- SHA1 db0882668647e687fabeb1add5a8881700155cce
- SHA512 ddcee8663e884fdc7e4903a484ae99f95a56fedbe553b6f659feaf1491b7896631b8fa7954f98c6653c20f847715b7509c1d8d089da398902d1fb4261e05dae0
- SSDEEP 393216:VUtyvUBJv0I6JgTujf8mbHxFBvmxGGyS6J0K:uCcvr6CujfhdeQGySw0K
- TLSH
  T121D63367D5A52A03CFCFF57B368BCF0EB8E6A69E0411ED090B9813453B5B0E4567928C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Solara/Monaco/fileaccess/node_modules/statuses/package.json
- Size 1KB
- SHA256 53bd1b14e481356bf004c0a45f9022d07fbc56bfe849115e141ba302c8818275
- MD5 210cda9d522bab0911dff42346dee4be
- SHA1 3328d9bfc82e4f981a1acd2f3f78c524bf85333c
- SHA512 8baf4a077586efc571b3b32c64dfde8a2a0aeb4ecea91e016ff96e40051c0de4e6c09cdb8c0711a2731a77120d9aceac0bf2077d0e14e28853fef90d512ab620
- TLSH
  T18021ED20CC458C6315D589AA6521A1C26070059B4652F80CFBBD025C4F8D2EF90BF9BC
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  Solara/Monaco/fileaccess/node_modules/toidentifier/index.js
- Size 504B
- SHA256 f9f26b0e90e2569b61d02ef2a92718624b8854592b1ede7f2c8879a69cfdba05
- MD5 b7a1b5c3f74ff7e0a11b61d56673afa0
- SHA1 fc66e4445021b49b1f4386ca72cad654dc408d34
- SHA512 96163678827f633cbea608af831f018db8577ee22543d6dfd6550a176fe84b4b78550dfb5ecbfe60f1096438b3ce485fbce86288ebdce8b6d90484d7cda079ce
- TLSH
  T1ACF09ECF28D131834787887595DAC16734C8A563A35B90E1B0A9BEE96F3413402B5DDC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Solara/Monaco/fileaccess/node_modules/toidentifier/package.json
- Size 1KB
- SHA256 f34c59f784d43da6e633390d85d14ca60539b4676159444f313c62fcfc3b68dc
- MD5 fd6e2543a1b015cc443c7a2dcc4e3668
- SHA1 e8fe1d02a381b71a33e41588ae26746d34fa4903
- SHA512 c08da7b7852c9b297a29f6fb5dcf51a67b513caec17474acecbcf324c5615601fe99744bd49e90f0a21d8a5710abd58e78b4a89d9ca0e4b0b1f29584ba54b57e
- TLSH
  T14D213020C98A4CB352C88669786960C2246204874B82FE1DFBB5030D8F4D7BF50766FC
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  Solara/Monaco/fileaccess/node_modules/type-is/index.js
- Size 5KB
- SHA256 4a94338bd746c6b17dd8681f21124f84ed2cdd4a16022849d28900d5e568642a
- MD5 f9aa3afdc332adae59aa21d31090582d
- SHA1 7b36ddd28b09d31b459e9cbd15476dec2fac3fdb
- SHA512 eb56ecd48a228933ed5bf0055791fee237bda3c609cdf84df021d68ef5922401b18a1c5c9099b0a3a15091beb61c5837a9a847355271cfcaef4cdce00f2be474
- SSDEEP 96:pr6k1rbodiocKqn9rlsI87r34KKBEZdmx3Z4vF25XhPwc72OS0BkHfLZ:prn1rbeiSq9+QKap045XhB7/S0BkHfLZ
- TLSH
  T1CFB173C635C9B0058A0A44B447DEF3C1F968D4172A298D92F0CD76B56F88AB8C1B6FD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Solara/Monaco/fileaccess/node_modules/type-is/package.json
- Size 1KB
- SHA256 87917e3dda1080179447633c3edff7e4b917d62b463893c88cef5be0b2babc63
- MD5 ffa244d8a6f745a081a0cdde026879c9
- SHA1 28d55c4730fdacf9019317fae0ba93a0b6aebd0b
- SHA512 c384f368197c1eb14252568398efdd1fafe497ba985538b3953294d5dd6b83b745b0648edd60489d6ae3ea14607aad3e6e0d38cb6ed4be5684aaade44c303d90
- TLSH
  T13021F311C4991C6316E8D9A5686A61C3212049878A47FC1DF3B9131C8F8E26F90FABFC
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  Solara/Monaco/fileaccess/node_modules/unpipe/index.js
- Size 1KB
- SHA256 69cd57b5cdd08c42410ebc0d92235e334f1fb985e6eb2dcfb1c692db674411bd
- MD5 377f0c4bddbbd7e73b32a53e687df342
- SHA1 df9106d2019fe2e4bfae9882e4a8be7012eb55cf
- SHA512 bfec0a252c8d2718c6b747e40e6d3acf165c5f797f725e4729e477707aaa04f6904e1b00688dd348ca25fe13adef8e3fc7f0fc8b03877359b5883224107dc0de
- TLSH
  T1CC21ADCC69E8202701C2A3F7A8DF97C8A8C0C213110D1941A6AED7D4BF41C3CA6B8FE4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Solara/Monaco/fileaccess/node_modules/unpipe/package.json
- Size 770B
- SHA256 28b717f978d2a4fc72cd08236931443b63fe6586102df3d1967e2b21ea8c5e11
- MD5 f8318a554ed98c6a030942e9c14aaac8
- SHA1 f67f2d17a18c3ded93c9423903df8e6678f4e416
- SHA512 673447c1a4022f7e46d3a1857b1db481c3b61c4f936156e422e99b4ef2e35bcd8487a4b0f7533900a3b071fe7475e3d11732a3df07f996383a04f508ce903ae8
- TLSH
  T11E019065E8766C2306C462B1F8A8858234C5484F49147D19B79FC65C4F4D1B990BFF2D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  Solara/Monaco/fileaccess/node_modules/utils-merge/index.js
- Size 381B
- SHA256 ec62860d6445addffd574f640451ea92e0558b6df793b2e0f1c7175fc2ff6366
- MD5 20d03f8bf4486091c44f17a97cbb6c24
- SHA1 77759a680bd22cacb94bdc438ed6250eeb10e50a
- SHA512 e892863627cfc57839d23a8647010a6ab17c7683b827bf07cc6e130f7d937816075ebc83c013d5fbf6c98f65eaef838093e8a2f891a8bd5e9d56937822f63ef5
- TLSH
  T192E0689049A2B047F087A1F090F5F086F54D004330AFD98D374CFEF48F809A185E0C89
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Solara/Monaco/fileaccess/node_modules/utils-merge/package.json
- Size 857B
- SHA256 6238e6d7e2fddd3e4826014b4e69cb20d332b472999728a7157db454c69121b8
- MD5 0230ade39b9c19f5fcc29ed02dff4afe
- SHA1 a03473329c34092ea6a88cc11c409a4ecf8bad33
- SHA512 260d0ed23c672b9abed7557d6664484e79b2b2c204f6ee87e9e75242f921b0dc2f66113ab265f070b927802cd20b9d40e2174f0788da56e26939fb10c8f885a6
- TLSH
  T1A711AF39E5759C330ACC65A1BDF90142F120884B4488BC1D778F251CAB5D1AB31BD18C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  Solara/Monaco/fileaccess/node_modules/vary/index.js
- Size 2KB
- SHA256 8e40311960636d40473c57e335bbca115036766bf150df296b941256432ab410
- MD5 8217c2d942ee5bf6866c92662515d975
- SHA1 0e3f2e39b49663eb93e911c9f9c96d2c843d85da
- SHA512 3ef722d37b016c63ac0126cfdcecb6d7140619d0cf4995898c0bbd9707951581527a6dcb78ac35e948c26fca53b8a199cf5a28e8f41821f0d5b617db54babd41
- TLSH
  T198516308A9E131461F8214B0D54FDD0263B8C20365049C56FAEF96AFBFD88A1B596FF9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Solara/Monaco/fileaccess/node_modules/vary/package.json
- Size 1KB
- SHA256 73edaee964d527117a9f69d6360fbe6cec534abd9127794be01a6af58a139daa
- MD5 3577fc17c1b964af7cfe2c17c73f84f3
- SHA1 82f740e2254b786f7a3a39a762d4d0fc6ec7b008
- SHA512 9fc7c9e6f129d53839998ac11523f7b4c47c541f7d4823b4c702358452a6cc903afa546297151f947881c2d9d3703d0863a2387a5b25c276ce74be91ebadc43b
- TLSH
  T18021EE20D1661DA341E456A6B5A949C26481058B0E52BD0DFB6F135CCF4D1BF90FBEBC
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  Solara/Monaco/fileaccess/package.json
- Size 53B
- SHA256 f44555af79dfa01a68ae8325382293fc68cd6c61d1d4eb9b8f7a42c651c51cde
- MD5 b9f2ca8a50d6d71642dd920c76a851e5
- SHA1 8ca43e514f808364d0eb51e7a595e309a77fdfce
- SHA512 81b6352bbabd0bffbc50bfcd0cd67dc3c2a7d63bda0bf12421410c0ec8047af549a4928b5c5c3e89ead99aa9240bddb461c618c49287c15d9d4d3a899e8f596a
- TLSH
  T1D690022094909E6B01DB71C1587C44575DE298014058CC1551C54168971449B089D0DC
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  Solara/Monaco/index.html
- Size 14KB
- SHA256 e0f556c791d604813a2552e4dd5af9779875563561c5bc5824b4c0bd51313ba3
- MD5 126a540e637b97ba0f8abb694c5ab47e
- SHA1 90530889b3a95f7c2058adc4120917b8b9498a9e
- SHA512 b71054585ff453b07b5d677aa1988de8dd2392d159aea8745b8c98ee1ecab26f5b80e9fed551f9f7e48e41163b4da395b001423396df2baccb0be20ba939363e
- SSDEEP 384:ttTeSQmfElKnihKRA5L1t2bVBJjjgOtu3BX+BILnoamLF:yGihVt2bVBJ70xOyboamLF
- TLSH
  T1B162CAB9B34F100B1282534974F67598FE2DC531C2235AAEB2EAF230D5DD8AC435A6F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  Solara/Monaco/vs/basic-languages/lua/lua.js
- Size 5KB
- SHA256 fc2d6fb52a524a56cd8ac53bfe4bad733f246e76dc73cbec4c61be32d282ac42
- MD5 8706d861294e09a1f2f7e63d19e5fcb7
- SHA1 fa5f4bdc6c2f1728f65c41fb5c539211a24b6f23
- SHA512 1f9297eb4392db612630f824069afdc9d49259aba6361fb0b87372123ada067bc27d10d0623dc1eb7494da55c82840c5521f6fef74c1ada3b0fd801755234f1f
- SSDEEP 96:SD3yDUfRD5dyVdO29SvE/TMCL8CvcOAtOfxSVkxMZlMfE:nD4Ldyn7Ss/TMmUtOfxhxjE
- TLSH
  T11CB11ED89C9951594AE1E766879EE0A6E1544203CC3C7D74B7EC438C4F8CA4C86BE73D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Solara/Monaco/vs/editor/editor.main.css
- Size 171KB
- SHA256 fb2cbf2ee64286bc010a6c6fe6a81c6c292c145a2f584d0240c674f56e3015b0
- MD5 6af9c0d237b31c1c91f7faa84b384bdf
- SHA1 c349b06cad41c2997f5018a9b88baedd0ba1ea11
- SHA512 3bda519fed1cfa5352f463d3f91194122cf6bf7c3c7ab6927c8ca3eea159d35deb39328576e7cbd982cfdf1f101b2a46c3165221501b36919dbde6f1e94bf5ff
- SSDEEP 1536:ZxP4PUPVP0PAPeMi76Q4TVq6bbhLynlDTkDatDF8Jmmvgs0aMJkn:phbIRkDSYmmvgs0aMJK
- TLSH
  T1B8041AAF96061F4F26E54423C195BFAA38FDC1B6F0128ED5E87D3B64C00D6D922961BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32