General
- Target Solaris.exe
- Size 1.3MB
- Sample261022-2nf4jaf15v
- SHA256 6f9e83ae2644bce87c0aae358b2fcc19fe1c11de1182b0d88aa90d663a31d41d
- MD5 5004244205510fda3d952d5eb268bf39
- SHA1 cccb18afdd2924dda91ba93027fab0b6bb8457d7
- SHA512 665949d0b863ebd8f78d683ed2d1ea372d2d2d7689aa6395a690a9f007c62d431bf9cd80685d5dc122eb06df6ce75bf258bd9c63a9ed1fa75208d667096f483d
- SSDEEP 24576:/PwfbH1kDUeZB7QFAFCLYNMDei7qkkGxl01sYcaFsjulkFC847k/zKZv:nwD6DUeZeeCoheqkHAsY1sjgkFC8x
- TLSH T1D25533752B312E83E089517E8F1C4B79139E41072B970E46DCBDADA0F51FBB394A9358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Solaris.exe
Resource
win10v2004-20260911-de
8 signatures
150 seconds
Malware Config
Targets
-
- Target Solaris.exe
- Size 1.3MB
- SHA256 6f9e83ae2644bce87c0aae358b2fcc19fe1c11de1182b0d88aa90d663a31d41d
- MD5 5004244205510fda3d952d5eb268bf39
- SHA1 cccb18afdd2924dda91ba93027fab0b6bb8457d7
- SHA512 665949d0b863ebd8f78d683ed2d1ea372d2d2d7689aa6395a690a9f007c62d431bf9cd80685d5dc122eb06df6ce75bf258bd9c63a9ed1fa75208d667096f483d
- SSDEEP 24576:/PwfbH1kDUeZB7QFAFCLYNMDei7qkkGxl01sYcaFsjulkFC847k/zKZv:nwD6DUeZeeCoheqkHAsY1sjgkFC8x
- TLSH T1D25533752B312E83E089517E8F1C4B79139E41072B970E46DCBDADA0F51FBB394A9358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.