f4a3927a30c4cf187f93ff2cf976520a2fd81361794e4e4bf1f2ed1eb8c791a3

Analysis

user interaction
yes
max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 19:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Solas Loader.exe
Size 15.0MB
Sample261107-x88xtsft8m
SHA256 f4a3927a30c4cf187f93ff2cf976520a2fd81361794e4e4bf1f2ed1eb8c791a3
MD5 96a89164264163dbd213560957a9d951
SHA1 f2f82339d33a2a41b4b99833f044b97e0c181ff9
SHA512 ab38bccfdaa52d20b920443ef0cf6a83d3b499a4eab6a6aae27ceee315e4f34ff2b9af84d71f5e72e23add50b86ea83a0e7f97d8cb0a7639568ecd23b1c0f4f3
SSDEEP 196608:f207KjdIwIFUYMAltKKJJ9BPHcBUCtr9sbI52LJkFfR/vo2nrbSkX2Aj5J61IK5J:fI+wIKYZrtfusbIQLJkFRfnJGeLiNjv
TLSH
T1FCF623E32EC5A2ECC4DB8B10718A5B5D70D2B78C81FE6A1F37C61D027670E974A45A36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
4368	Solas Loader.exe
4368	Solas Loader.exe

C:\Users\Admin\AppData\Local\Temp\Solas Loader.exe
"C:\Users\Admin\AppData\Local\Temp\Solas Loader.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4368

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4368-0-0x0000000140093000-0x0000000140AB1000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads