SolaraV3[.]exe | Triage™

Resubmissions

11/08/2026, 19:36

260811-ybajfaxtby

11/08/2026, 18:49

260811-xgke6aygng6

Sharing

Copy URL Twitter E-mail

General

Target
SolaraV3.exe
Size 18.5MB
Sample260811-ybajfaxtby
SHA256 230a8a5c55e9e4f0bbd05286d16306082801d6793108f3e806d941ec982f09f1
MD5 f57a36055896b9980b8c732d4a69bf69
SHA1 2e780669c907a61f09f7af46796a1b76203e5e0c
SHA512 14015c59f10a45bf895136f6e609a97596f8c5ba91e833d0463e5a55becb7d732b1ffefa11c100529055661f238894b2f7e6a489acc69540056e65d3f23ed60a
SSDEEP 196608:5NHyzgLPP6hUJFdR/6yUNAY1n64VNWI13h8Alj3xvY:5NHyzgLPP6hUJFdRHY1n64VB1x8AF31Y
TLSH
T15F17F7257A5B996CD09BC474834B8A720A7130CB0B35B9FF449496383F6EBF46F38259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

SolaraV3.exe

.exe 18.5MB

SolaraV3.exe

IMPHASH 16cb6d8487a68c1efa1de0bf37f4bca3
SHA256 230a8a5c55e9e4f0bbd05286d16306082801d6793108f3e806d941ec982f09f1
MD5 f57a36055896b9980b8c732d4a69bf69
SHA1 2e780669c907a61f09f7af46796a1b76203e5e0c
SHA512 14015c59f10a45bf895136f6e609a97596f8c5ba91e833d0463e5a55becb7d732b1ffefa11c100529055661f238894b2f7e6a489acc69540056e65d3f23ed60a
SSDEEP 196608:5NHyzgLPP6hUJFdR/6yUNAY1n64VNWI13h8Alj3xvY:5NHyzgLPP6hUJFdRHY1n64VB1x8AF31Y
TLSH
T15F17F7257A5B996CD09BC474834B8A720A7130CB0B35B9FF449496383F6EBF46F38259
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

6a:18:8f:fd:41:4a:54:8c:32:6a:2f:55:ac:9f:38:26:c4:2f:dc:76:94:d5:7c:de:0a:01:12:f7:94:a0:4c:b5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=CMD Softworks LLC,O=CMD Softworks LLC,L=Albuquerque,ST=New Mexico,C=US

Chains

Aug 7, 2026

CN=CMD Softworks LLC,O=CMD Softworks LLC,L=Albuquerque,ST=New Mexico,C=US

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

64:33:51:d3:c7:38:9f:08

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 24, 2016 - Jun 24, 2031

Subject

CN=CMD Softworks LLC,O=CMD Softworks LLC,L=Albuquerque,ST=New Mexico,C=US

Serial Number

5c:c9:53:6f:1f:f5:42:09:82:50:b6:64:3c:ab:c0:39

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 7, 2026 - Apr 7, 2027

Subject

CN=SSL.com Timestamping Unit 2025 E1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1f:6b:16:62:d2:2e:1b:6c:5d:f1:c0:c1:a0:60:0e:38

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 18, 2025 - Nov 12, 2034

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Nov 12, 2034

Minor OS version

Major OS version

Entry point

13049120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

SolaraV3.pdb

kernel32

GetUserDefaultUILanguage GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetEnvironmentVariableW DeleteFileW DeviceIoControl GetFinalPathNameByHandleW ReleaseMutex CreateMutexA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess FindClose FindFirstFileExW CopyFileExW ReleaseSRWLockExclusive RemoveDirectoryW GetCommandLineW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler GetTempPathW SetFilePointerEx CreateDirectoryW CreateWaitableTimerExW CreateProcessW FindNextFileW GetSystemDirectoryW GetEnvironmentStringsW GetFileInformationByHandleEx GetSystemTimePreciseAsFileTime RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle ReadFileEx GetCurrentProcessId CreateThread QueryPerformanceCounter QueryPerformanceFrequency HeapReAlloc SetFileTime SetFileInformationByHandle MoveFileExW GetFullPathNameW SetLastError SleepEx WriteFileEx SetHandleInformation WaitForSingleObject FreeEnvironmentStringsW OutputDebugStringA OutputDebugStringW CompareStringOrdinal GetEnvironmentVariableW GetStdHandle LCIDToLocaleName GetCurrentThreadId LoadLibraryW LoadLibraryA AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlVirtualUnwind SetWaitableTimer GetSystemTimeAsFileTime GetModuleHandleW lstrlenW GetConsoleMode GetFileInformationByHandle GetFileAttributesW SetFileCompletionNotificationModes GetQueuedCompletionStatusEx CreateIoCompletionPort CancelIoEx WriteFile ReadFile GetWindowsDirectoryW PostQueuedCompletionStatus GetOverlappedResult CreateFileW SetNamedPipeHandleState RtlPcToFileHeader RaiseException QueryFullProcessImageNameW OpenProcess TerminateProcess GetCurrentProcess LoadLibraryExW FlsAlloc GetModuleHandleA Sleep FlsGetValue FlsSetValue FormatMessageW LoadLibraryExA FlsFree EncodePointer InitializeSListHead SetUnhandledExceptionFilter RtlUnwindEx HeapFree HeapAlloc GetProcessHeap CloseHandle GetTimeZoneInformationForYear InitializeCriticalSectionEx GetModuleFileNameW FreeLibrary SetThreadErrorMode GetProcAddress GetLastError DeleteCriticalSection

advapi32

SystemFunction036 EventRegister EventSetInformation EventWriteTransfer EventUnregister RegGetValueW RegCloseKey RegDeleteValueW RegOpenKeyExW RegCreateKeyTransactedW RegCreateKeyExW RegOpenKeyTransactedW RegQueryValueExW

oleaut32

GetErrorInfo SysFreeString SysStringLen SetErrorInfo

bcryptprimitives

ProcessPrng

ntdll

NtDeviceIoControlFile NtCancelIoFileEx NtCreateNamedPipeFile NtCreateFile RtlGetVersion NtOpenFile RtlNtStatusToDosError NtReadFile NtWriteFile

user32

OffsetRect CreateWindowExW GetMenuBarInfo DestroyMenu CheckMenuItem RemoveMenu CreatePopupMenu CreateMenu SetMenuItemInfoW AppendMenuW IsWindow InsertMenuW TrackPopupMenu PostQuitMessage CreateAcceleratorTableW DestroyAcceleratorTable GetMenuItemInfoW DrawMenuBar SetMenu DrawIconEx GetSystemMetrics CreateIcon ToUnicodeEx GetKeyState GetAsyncKeyState GetKeyboardState MapVirtualKeyExW GetMenu IsWindowVisible EnumDisplayMonitors MonitorFromPoint SetWindowTextW GetWindowTextW GetWindowTextLengthW SendInput SetForegroundWindow DestroyIcon DrawTextW RegisterTouchWindow RegisterClassExW SystemParametersInfoA SetPropW SetWindowLongW EnableMenuItem GetSystemMenu ClipCursor GetClipCursor ShowCursor GetRawInputData GetKeyboardLayout VkKeyScanW RegisterRawInputDevices ReleaseCapture SetCapture MsgWaitForMultipleObjectsEx SetWindowPos AdjustWindowRectEx GetWindowDC RegisterWindowMessageA SetParent MapWindowPoints GetWindow SetFocus ShowWindow ReleaseDC GetWindowRect SetWindowLongPtrW GetMessageA DispatchMessageA GetParent GetWindowLongPtrW TranslateMessage FindWindowExW SetWindowRgn TranslateAcceleratorW EnableWindow EnumChildWindows PostMessageW IsWindowEnabled IsProcessDPIAware GetDC DestroyWindow MessageBoxW SetWindowDisplayAffinity AdjustWindowRect SendMessageTimeoutW GetForegroundWindow FlashWindowEx GetActiveWindow UpdateWindow InvalidateRect SetCursorPos RedrawWindow LoadCursorW InvalidateRgn GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW GetUpdateRect MapVirtualKeyW ValidateRect SetCursor CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SystemParametersInfoW FillRect GetMonitorInfoW MonitorFromRect MonitorFromWindow GetCursorPos ClientToScreen GetClientRect GetWindowLongW ScreenToClient DefWindowProcW PostThreadMessageW PeekMessageW DispatchMessageW GetMessageW IsIconic SendMessageW

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

gdi32

CreateDIBSection GetDeviceCaps CreateSolidBrush CreateRectRgn DeleteObject CreateCompatibleDC BitBlt SetTextColor CombineRgn SetBkMode DeleteDC SelectObject

dwmapi

DwmGetWindowAttribute DwmEnableBlurBehindWindow DwmSetWindowAttribute

ole32

CoTaskMemFree CoUninitialize CoCreateInstance CoCreateFreeThreadedMarshaler CoTaskMemAlloc OleInitialize RegisterDragDrop CoInitializeEx RevokeDragDrop

comctl32

DefSubclassProc TaskDialogIndirect RemoveWindowSubclass SetWindowSubclass

shlwapi

SHCreateMemStream

shell32

SHGetKnownFolderPath ShellExecuteW DragQueryFileW SHAppBarMessage DragFinish SHCreateItemFromParsingName

ws2_32

bind freeaddrinfo WSASocketW WSAStartup shutdown connect ioctlsocket WSACleanup getaddrinfo WSAGetLastError closesocket WSAIoctl setsockopt send WSASend recv getsockname getpeername getsockopt

secur32

EncryptMessage DeleteSecurityContext ApplyControlToken QueryContextAttributesW FreeContextBuffer AcceptSecurityContext InitializeSecurityContextW FreeCredentialsHandle DecryptMessage AcquireCredentialsHandleA

crypt32

CertOpenStore CertCloseStore CertGetCertificateChain CertFreeCertificateChain CertVerifyCertificateChainPolicy CertAddCertificateContextToStore CertDuplicateCertificateChain CertEnumCertificatesInStore CertDuplicateCertificateContext CertFreeCertificateContext CertDuplicateStore

bcrypt

BCryptGenRandom

iphlpapi

GetExtendedTcpTable

api-ms-win-crt-string-l1-1-0

strcpy_s wcslen strlen _wcsicmp wcscmp

api-ms-win-crt-math-l1-1-0

pow roundf round trunc floor __setusermatherr

api-ms-win-crt-convert-l1-1-0

_ultow_s _wtoi wcstol

api-ms-win-crt-runtime-l1-1-0

terminate _set_app_type _configure_narrow_argv _initialize_narrow_environment _seh_filter_exe _initterm _initterm_e exit _exit abort __p___argc __p___argv _crt_atexit _register_onexit_function _initialize_onexit_table _cexit _c_exit _register_thread_local_exe_atexit_callback _get_initial_narrow_environment

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode calloc malloc _callnewh

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

SolaraV3.exe

kernel32

advapi32

oleaut32

bcryptprimitives

ntdll

user32

api-ms-win-core-synch-l1-2-0

gdi32

dwmapi

ole32

comctl32

shlwapi

shell32

ws2_32

secur32

crypt32

bcrypt

iphlpapi

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic