General
- Target Solara.Dir.zip
- Size 12.0MB
- Sample260811-rxt2msvema
- SHA256 4eb0ed7a8b393a861e1d77450e252849cc2d91c97e7e986668e175398b7d178b
Malware Config
Targets
-
- Target Solara/Microsoft.Web.WebView2.Core.dll
- Size 634KB
- SHA256 2b999d1775004e98b32f281f4518f3952df650970748527ef5b54fa9979d6c9c
Score1/10 -
- Target Solara/Microsoft.Web.WebView2.WinForms.dll
- Size 38KB
- SHA256 bbc50575b6a191fd433df854227921937f256e91a81b47c697d95ea8ed027ff6
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Solara/Microsoft.Web.WebView2.Wpf.dll
- Size 80KB
- SHA256 6d329162b460515a849c693518ff626a1a3363e79d549cfd6822e5601f24603e
Score1/10 -
- Target Solara/Monaco/fileaccess/index.js
- Size 6KB
- SHA256 ed94fd8980c043bad99599102291e3285323b99ce0eb5d424c00e3dea1a34e67
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Solara/Monaco/fileaccess/node_modules/accepts/index.js
- Size 5KB
- SHA256 be2decbd50610e8f995c1e312ee4dd6d7c1244cfdf03ee4c4a3da68e572dada1
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Solara/Monaco/fileaccess/node_modules/array-flatten/array-flatten.js
- Size 1KB
- SHA256 766ca145b6d25e3d60f352a716e8fa1876bcdf362c0767c360cf24f335bc281e
Score3/10 -
- Target Solara/Monaco/fileaccess/node_modules/body-parser/index.js
- Size 2KB
- SHA256 9c6c900e7e85fb599c62d9b9e4dfd2ea2f61d119dce5ed69ac3a8da828819241
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Solara/Monaco/fileaccess/node_modules/body-parser/lib/read.js
- Size 4KB
- SHA256 1e9e274755366c39ae70e8b9a7a42fc12219566e67efaf9b7ebc2a8b337f5b6b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Solara/Monaco/fileaccess/node_modules/body-parser/lib/types/json.js
- Size 5KB
- SHA256 44f8b529333004e2aaff6db3a1dbe7068f1ac5fa1173e9634686a78c2262af35
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Solara/Monaco/fileaccess/node_modules/body-parser/lib/types/raw.js
- Size 1KB
- SHA256 4e9cc80a7ee8bd667c68c264b4c374b28e731246ddb6ec22c3968daf837e30a2
Score3/10 -
- Target Solara/Monaco/fileaccess/node_modules/body-parser/lib/types/text.js
- Size 2KB
- SHA256 54a6e8ef720b06a300b21f6c60387805dec743a64154784a609dfe8c6860776a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Solara/Monaco/fileaccess/node_modules/body-parser/lib/types/urlencoded.js
- Size 5KB
- SHA256 752717d87aad57451638af2073b04eba964f348910c0bcf0070c43e732de5eb2
Score3/10 -
- Target Solara/Monaco/fileaccess/node_modules/bytes/index.js
- Size 3KB
- SHA256 893fcbbbe962dc00e40dc2e4b20e76e92d874dd257345003c6575d940e91a37f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Solara/Monaco/fileaccess/node_modules/call-bind/callBound.js
- Size 413B
- SHA256 2b2fce7622fdd680256d28bcd59c30913546a825bf69d754d21a1d21ccc2928c
Score3/10 -
- Target Solara/Monaco/fileaccess/node_modules/call-bind/index.js
- Size 1KB
- SHA256 6b4ea26f8ca351cee55da416500ffca72fdb14eb5909f1512ce8ca68e47d7621
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Solara/Monaco/fileaccess/node_modules/content-disposition/index.js
- Size 10KB
- SHA256 e86a88a5d1a9dd74faa753ca4e47a78e38ae930f3206e5e887cf6cb0ad70cbf8
Score3/10