Overview

overview

9

Static

static

Synapse Launcher.exe

windows7-x64

9

Synapse Launcher.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Synapse Launcher.exe

  • Size

    787KB

  • Sample

    221128-fcv8esfd44

  • MD5

    154e1239c1bb0e04b18f27aabffcd6e7

  • SHA1

    0c72c4db91b8ae7e10271aece8db7efb5271f8ec

  • SHA256

    93fc4441b3648a74d3bc72cc5f34ced564ceca74a5e560961178b42a6c8416b0

  • SHA512

    52d4b91f4610a53ad41e0c73d129b218551ebb70e2162e1c268d84030dc77bc5411926a15fa44ba62f1a93e1c757287c842a217ea25602fac0db157742ee2a05

  • SSDEEP

    6144:ARv5ZcPe5q67ue+MNhH0X4wz2HA/z0OqysLAilL2hJO5Hp2y9z89S49htWZ1BXtx:ARv5OIbhH0IwzyE8LyspL9z89x+zHFi

Score
9/10
evasiontrojan

Malware Config

Targets

    • Target

      Synapse Launcher.exe

    • Size

      787KB

    • MD5

      154e1239c1bb0e04b18f27aabffcd6e7

    • SHA1

      0c72c4db91b8ae7e10271aece8db7efb5271f8ec

    • SHA256

      93fc4441b3648a74d3bc72cc5f34ced564ceca74a5e560961178b42a6c8416b0

    • SHA512

      52d4b91f4610a53ad41e0c73d129b218551ebb70e2162e1c268d84030dc77bc5411926a15fa44ba62f1a93e1c757287c842a217ea25602fac0db157742ee2a05

    • SSDEEP

      6144:ARv5ZcPe5q67ue+MNhH0X4wz2HA/z0OqysLAilL2hJO5Hp2y9z89S49htWZ1BXtx:ARv5OIbhH0IwzyE8LyspL9z89x+zHFi

    Score
    9/10
    evasiontrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks