SolarWinds.Orion.Core.BusinessLayer.dll

Classification: Malicious

SolarWinds.Orion.Core.BusinessLayer.dll is a malicious file sample (Windows executable, 1006.0 KB). Linked to Sunburst malware.

Detection summary

  • 0 antivirus detections (52% detection ratio)
  • 0 IDS alerts
  • 2 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: SUNBURST (S0559)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
SUNBURST Abuse.ch 2020-12-28 05:49:51 2020-12-28 05:49:51 malicious-activity S0559 SUNBURST
Generic.Sunburst. Hybrid-Analysis 2020-12-28 05:45:15 2020-12-28 05:45:15 S0559 SUNBURST

Sample information

Filenames
SolarWinds.Orion.Core.BusinessLayer.dll, f3a622b84e632e255797fa2f7da9de8e05bc523931da6e9327dc1db8171d69aa
File type
PE32 executable (DLL) (console) Intel 80386 Mono/. ...
Size
1030120 bytes
MD5
fc8e4ed4d3a90ab61ef6af99443273e3
SHA-1
8ead132e3a3bc4a09685f807c53317cb1c127cb1
SHA-256
f3a622b84e632e255797fa2f7da9de8e05bc523931da6e9327dc1db8171d69aa
First indexed
2020-12-28 05:45:15
Last updated
2026-10-08 23:20:50

Process list

NameCommand line
<Ignored Process>
regsvr32.exe/s "C:\f3a622b84e632e255797fa2f7da9de8e05bc523931da6e9327dc1db8171d69aa.dll"