General

  • Target
    bot_x64.exe
  • Size 57KB
  • Sample260831-g29yjsweld
  • SHA256 eb4c2dc7db21d6a8a889c74c7b90eaac0e095205063ae3e348a400e253c6bdd8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • solaris_loader

C2
  • 196.251.107.186

  • 192.162.199.186

  • 196.251.107.163

Targets

    • Target
      bot_x64.exe
    • Size 57KB
    • SHA256 eb4c2dc7db21d6a8a889c74c7b90eaac0e095205063ae3e348a400e253c6bdd8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: SolarisLoader

      SolarisLoader is a Windows loader written in C.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks