General
-
Target
SYNAPSE_X_CRACKED.rar
-
Size
4.5MB
-
Sample
220826-yam35shfh8
-
MD5
06c53377fc35c61d74f7a05afabf0558
-
SHA1
823da3b7dcc9d4221012102af0c006d616745d67
-
SHA256
47a5d4fee227db598a8eb2ee7b4aa3f5ed3ecc7c6d59e2e2998a2b696854af55
-
SHA512
666f4b8f6b58ee834bb73468d7a5be13a10682bc5d950f73a7852c5a9928e175b941503c8e356071d2b2b5f833c2eab48e55061f5187de06fa713efa80163ca3
-
SSDEEP
98304:SX/EjfagrmF6hJdz6XqVHy1E+PF2dK+OS+PU5/6dRaJuKY:4S7yF6AXcy1p89+PmpnY
Static task
static1
Behavioral task
behavioral1
Sample
SYNAPSE X CRACKED/SYNAPSE X CRACKED/RobloxSynapse.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral2
Sample
SYNAPSE X CRACKED/SYNAPSE X CRACKED/php5ts.dll
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
SYNAPSE X CRACKED/SYNAPSE X CRACKED/RobloxSynapse.exe
-
Size
700.0MB
-
MD5
99709192d1df7d5f7d8e583472818007
-
SHA1
2914457c90f0a89c1ccbbdd96157907214e4b1fb
-
SHA256
e6120b4444738b23157d1476615c68a719cb22017e3e48ee794003d162a4ed20
-
SHA512
a416d828c81726a0842f85410c4bc3e0d516671c2284a30c82dc68fbe9375fab7d23cca6efcb4cd4077af910ae3843fe0b08ad31b0a87e0e6c9753fb1903257b
-
SSDEEP
49152:C7G9SRPCkd/OJLDPXissDMRT6FacYKfQWNpGW78O+siqTDpQ:C7G0Nt42DCT6HYKSZqTG
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-
-
-
Target
SYNAPSE X CRACKED/SYNAPSE X CRACKED/php5ts.dll
-
Size
6.5MB
-
MD5
c9aff68f6673fae7580527e8c76805b6
-
SHA1
bb62cc1db82cfe07a8c08a36446569dfc9c76d10
-
SHA256
9b2c8b8c4cec301c4303f58ca4e8b261d516f10feb24573b092dfccc263baea4
-
SHA512
c7836f46e535046562046fdd8d3264cd712a78c0f41eab152c88ea91b17d34f000e2387ded7e9e7b3410332354aabf8ca7d37729eb68e46ab5ce58936e63ac56
-
SSDEEP
98304:NIj1qYT5UnbVloeFVRFHFq0N8WaumOQp0BAUZLtYX:KEPLPFHFZNKumOQp0VRE
Score1/10 -