2020-12-13 SUNBURST SolarWinds Backdoor Samples

2020-12-13 Fireeye 
Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise Multiple Global Victims With SUNBURST Backdoor

The Resurgence of Russian Threat Actor, NOBELIUM

Download (627.7 MB). Email me if you need the password (see in my profile)
 

          Malware Inventory (work in progress)

Reference

I am sure you all saw the news. 

Links updated: Jan 19, 2023

2020-12-13 Microsoft

Customer Guidance on Recent Nation-State Cyber Attacks

The Resurgence of Russian Threat Actor, NOBELIUM

 

Well, here are the Sunburst binaries. 

Here is a Sunburst malware analysis walk-through video by Colin Hardy

https://www.youtube.com/watch?v=JoMwrkijTZ8&feature=youtu.be

Hashes

SolarWinds.Orion.Core.BusinessLayer.dll

 Trojan:MSIL/Solorigate.B!dha

A Variant Of MSIL/SunBurst.A

SolarWinds.Orion.Core.BusinessLayer.dll

32519b85c0b422e4656de6e6c41878e95fd95026267daab4215ee59c107d6c77

dab758bf98d9b36fa057a66cd0284737abf89857b73ca89280267ee7caf62f3b

eb6fab5a2964c5817fb239a7a5079cabca0a00464fb3e07155f28b0a57a2c0ed

c09040d35630d75dfef0f804f320f8b3d16a481071076918e9b236a321c1ea77

ac1b2b89e60707a20e9eb1ca480bc3410ead40643b386d624c5d21b47c02917c

019085a76ba7126fff22770d71bd901c325fc68ac55aa743327984e89f4b0134

ce77d116a074dab7a22a0fd4f2c1ab475f16eec42e1ded3c0b0aa8211fe858d6

a25cadd48d70f6ea0c4a241d99c5241269e6faccb4054e62d16784640f8e53bc

d3c6785e18fba3749fb785bc313cf8346182f532c59172b69adfb31b96a5d0af

0f5d7e6dfdd62c83eb096ba193b5ae394001bac036745495674156ead6557589

6e4050c6a2d2e5e49606d96dd2922da480f2e0c70082cc7e54449a7dc0d20f8d

CORE-2019.4.5220.20574-SolarWinds-Core-v2019.4.5220-Hotfix5.msp

d0d626deb3f9484e649294a8dfa814c5568f846d5aa02d4cdad5d041a29d5600

appweblogoimagehandler.ashx.b6031896.dll

c15abaf51e78ca56c0376522d699c978217bf041a3bd3c71d09193efa5717c71

TEARDROP

b820e8a2057112d0ed73bd7995201dbed79a79e13c79d4bdad81a22f12387e07

1817a5bf9c01035bcf8a975c9f1d94b0ce7f6a200339485d8f93859f8f6d730c

RAINDROP

be9dbbec6937dfe0a652c0603d4972ba354e83c06b8397d6555fd1847da36725

This is the compromised installer file ( was still on Solarwinds update downloads  on Dec 14, 2020)

File size 419.76 MB

CoreInstaller.msi

ad2fbf4add71f61173975989d1a18395afb8538ed889012b9d2e21c19e98bbd1

2020-04-21 17:31:02

SolarWinds Orion Core Services 2020.2

{77E2D294-3D5C-4D93-ADF1-884CCEAD93B0}

File Version Information

Date signed 05:32 PM 04/21/2020

Signers

Solarwinds Worldwide, LLC

Symantec Class 3 SHA256 Code Signing CA

VeriSign

VT - 0 (Dec 14, 2020)

If you unzip, check 

019085a76ba7126fff22770d71bd901c325fc68ac55aa743327984e89f4b0134   (36 detections , part of the IOC set)

SolarWinds.Orion.Core.BusinessLayer.dll under OrionCore

More articles

1. Hacking Apps
2. Hack Website Online Tool
3. Hacker Search Tools
4. Termux Hacking Tools 2019
5. Hacker Tools Hardware
6. Pentest Box Tools Download
7. Pentest Tools Apk
8. Hacker Tools Windows
9. Hacker Tools
10. Hack Tools Pc
11. Best Hacking Tools 2020
12. Hacker Tools 2019
13. What Is Hacking Tools
14. Github Hacking Tools
15. Hack Tools
16. Pentest Tools
17. Hacker Tools Windows
18. Hacking Tools Name
19. Hacks And Tools
20. Nsa Hacker Tools
21. Hacker Tools Apk
22. Hack Tool Apk
23. Hacking Tools Software
24. Growth Hacker Tools
25. Hacking Tools And Software
26. Pentest Tools Port Scanner
27. New Hacker Tools
28. Hacker Tools For Windows
29. Hack Tools For Windows
30. Hacker Tools Linux
31. Easy Hack Tools
32. Hacking Tools For Windows
33. Computer Hacker
34. Pentest Tools Website Vulnerability
35. Termux Hacking Tools 2019
36. Free Pentest Tools For Windows
37. Hacking Tools For Beginners
38. Pentest Recon Tools
39. Hacking App
40. Hack Tool Apk No Root
41. Nsa Hacker Tools
42. Hacker Tools For Mac
43. Hacking Tools For Beginners
44. Pentest Tools Website Vulnerability
45. Hacking Tools 2020
46. Hack And Tools
47. Hack Tools For Games
48. Pentest Tools Find Subdomains
49. Hacker Tools Online
50. Pentest Tools For Ubuntu
51. Hack Website Online Tool
52. Hacker Tools For Windows
53. Pentest Tools Review
54. Hacking Tools For Pc
55. Hack And Tools
56. Termux Hacking Tools 2019
57. Hacker Tools For Windows
58. Hack Tools Online
59. Pentest Tools Open Source
60. Pentest Tools For Mac
61. Growth Hacker Tools
62. Hacking Tools Name
63. Hacking Tools Kit
64. Physical Pentest Tools
65. Pentest Tools Nmap
66. Hacker Tools For Mac
67. Black Hat Hacker Tools
68. Hacking Tools Kit
69. Tools 4 Hack
70. Ethical Hacker Tools
71. Hack Tools For Games
72. Hack Tools
73. Hack Tools For Mac
74. Hacking Tools Github
75. Hacking Tools Software
76. Hacking Tools Kit
77. Hacking Tools Windows 10
78. Nsa Hack Tools
79. Hacking Tools Online
80. Best Pentesting Tools 2018
81. How To Hack
82. World No 1 Hacker Software
83. Hackers Toolbox
84. Hacking Tools For Mac
85. Hack Rom Tools
86. Github Hacking Tools
87. Hacker Security Tools
88. Pentest Tools Find Subdomains
89. Hack Tools For Ubuntu
90. Pentest Tools Free
91. Pentest Tools Open Source
92. Hak5 Tools
93. Hacking Tools Pc
94. Pentest Box Tools Download
95. Easy Hack Tools
96. Tools Used For Hacking
97. Computer Hacker
98. Hack Tools For Windows
99. Pentest Tools Url Fuzzer
100. Hacking Tools
101. Hack And Tools
102. New Hack Tools
103. Underground Hacker Sites
104. Hack Tools Github
105. Pentest Tools Bluekeep
106. World No 1 Hacker Software
107. Pentest Tools Free
108. Hack Tools Download
109. Hackers Toolbox
110. Tools For Hacker
111. Hacking Tools Github
112. Hack Tools Github
113. Growth Hacker Tools
114. Termux Hacking Tools 2019
115. Pentest Tools Subdomain
116. Pentest Tools Url Fuzzer
117. Hacking Tools 2020
118. Hacks And Tools
119. Github Hacking Tools
120. Pentest Recon Tools
121. Pentest Tools Find Subdomains
122. Hacking Tools For Windows Free Download
123. Hacker Tools Hardware
124. Android Hack Tools Github
125. Pentest Tools For Mac
126. Pentest Tools Bluekeep
127. Pentest Box Tools Download
128. Nsa Hack Tools Download
129. Hack App
130. Pentest Box Tools Download
131. Hacker Tools Online
132. Hacking Tools For Kali Linux
133. What Are Hacking Tools
134. Hacker Tools Apk Download
135. Pentest Tools Android
136. Hacker
137. Pentest Box Tools Download
138. Hacking Tools Hardware
139. Hacking Tools 2019
140. Hacking Tools For Pc
141. Hacking Tools For Windows 7
142. Pentest Tools For Android
143. Hack Tool Apk No Root
144. Github Hacking Tools
145. Pentest Tools For Ubuntu
146. Hacking Tools
147. Hacking Tools For Kali Linux
148. Growth Hacker Tools
149. Hack App
150. How To Hack
151. Growth Hacker Tools
152. Pentest Tools Online
153. Pentest Tools Nmap
154. Hacker Tools Online
155. Kik Hack Tools
156. Hacker Tools Apk
157. Wifi Hacker Tools For Windows
158. Hack Tools Download
159. Hacking Tools Free Download
160. Wifi Hacker Tools For Windows
161. Nsa Hack Tools
162. Hacker Tool Kit
163. Pentest Tools Tcp Port Scanner
164. Hack Tools
165. Hacks And Tools
166. Pentest Tools For Windows
167. Hacking Tools For Pc
168. Hacking Tools 2019
169. Pentest Recon Tools