Static task
static1
Behavioral task
behavioral1
Sample
Synapse_X.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
Synapse_X.exe
Resource
win10v2004-en-20220112
General
-
Target
Synapse_X.exe
-
Size
306KB
-
MD5
4b10970bc9f2471119555eed253b116b
-
SHA1
60598f7dbacabea6d13507023631edc32c21e305
-
SHA256
b329f57c93e7b566651185a55962f0ec061b723be4535bc8cafc637ca4bff86b
-
SHA512
eed04da56031f93557c3469c5ccd2732512d78c8b5234b15277b7c2bf12e4f324ec3e41a70458aa61b85641cfb4757f128cc0896f2304f9b4e944fb66e672947
-
SSDEEP
1536:aA3xRyBVXL2XTTF7En368YVLNXfiQ/EWku3gN31+9OB8fq5doMgDHeES9XJ4bFO:XyBVXL8TTF7En3680Z6y3ikZSlzUF
Malware Config
Extracted
mercurialgrabber
https://discord.com/api/webhooks/938829853707358228/GQ_fqwKcxJ8YNvJz6lIzbc99R2g0jdMT2WXyMUJx0ho6uumX8O1iBN9YC5VR8cJFbaNk
Signatures
-
Mercurialgrabber family
Files
-
Synapse_X.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ