Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document File Hashes #1

Closed
jjfallete opened this issue Dec 23, 2020 · 2 comments
Closed

Document File Hashes #1

jjfallete opened this issue Dec 23, 2020 · 2 comments

Comments

@jjfallete
Copy link

jjfallete commented Dec 23, 2020

Good work.

Can you document the SHA256/SHA1/MD5 hashes of which SolarWinds.Orion.Core.BusinessLayer.dll file was decompiled here?

@ITAYC0HEN
Copy link
Owner

Thanks for the idea! Added the sha256 in a01f358
From what I inspected, the malicious class that was added to the trojaned SolarWinds was the same across all the trojaned binaries. Do you know otherwise?

@jjfallete
Copy link
Author

Thanks. I am not aware of variants to the code across DLLs, but thought it was worth noting to aid the community should it surface that there is.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants