Analysis

  • max time kernel
    133s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-01-2023 02:30

General

  • Target

    synapse-v2-launcher-12-5-22.zip

  • Size

    351KB

  • MD5

    b03b887ae392b6f33fad562becfc0482

  • SHA1

    101c2388c16ca7678a8426739ec7a1b505a6f6aa

  • SHA256

    93db5f4e53b9c0514b9c0c4c562be8d8e7c3d64f8542c03b7e7f032a9c5d0c55

  • SHA512

    0c1cd2e1f5c32b76aa8c994b6399acf81c6f9e2558e120d2eefcde9628a162fa4c3c74aae519a59640f49ee6ca1a33f3faeeaea5e8c02aef9749af0c74d4dc73

  • SSDEEP

    6144:tIYeWfLyWEuLGqsdGNNG5cbM8b1O+cy8xHZ/Lm/nukJxxUO3atM/bc1TEia:tyW5EuKwNNyOHc9xHZy/nVtUOL+T4

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\synapse-v2-launcher-12-5-22.zip
    1⤵
      PID:4708
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:2400

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\Desktop\BlockProtect.temp

        Filesize

        496KB

        MD5

        dc7110f0e66716e1ad9ada82b4391e93

        SHA1

        6661d09ebfd06bbfee4f1d966177c0575fb74c34

        SHA256

        5e1f749d8fac0ee7785a39ee80ece4fb2ada44d3abb29d070a253eeda6354c5b

        SHA512

        7ae803f31c0089bdd0f2bd9aec1c8c3bf11c1c6a0d62085dc4ac66fb30f854ea4ba683fe16d41124b0417af27b83eb82d7cf07a4a1b9442022c608525cd5482b

      • C:\Users\Admin\Desktop\ClearGrant.reg

        Filesize

        711KB

        MD5

        22af164c6846facd9d0294978a97d28f

        SHA1

        8b16347e0957f72a968101bb7348c49848d5dbaa

        SHA256

        dbc2f56263602f909df155c267837d9e808d7a54e06a70f08a4dd04ab1c56150

        SHA512

        1dccfa98554429f98974ec2526655d8f6ae7c4ecb199ab531abe47f32c80f36cbb525df807cc4d9aa3bb413a6bc1d03574bf743dae7bce1374f2a196cb8b3a8a

      • C:\Users\Admin\Desktop\ConvertToStop.cmd

        Filesize

        788KB

        MD5

        9169bed5f71e77fd7552b7b59525a906

        SHA1

        d01ec7b2ae97cd50e80be5ebe38dd0ed86c5c19d

        SHA256

        515c414144fe8d8591f19235fc13e94e23059b80c26a6d2c25497ceb85ada509

        SHA512

        a793822368747e032bac98d605e0e91e11497aa73d6b745bca3c79d14307dbaf7e1749af88ad40ffd715bc8ebee94c7f5ba46145bd822c5ca85d5a3c890a70a4

      • C:\Users\Admin\Desktop\DebugCompare.mov

        Filesize

        633KB

        MD5

        dbdc35c59f29ae5b7cf0ad818004c260

        SHA1

        a742e7c1171e568d4c78d4269f060899b26b3b30

        SHA256

        9a5b8f216eabfb8e31c915cb50711fc2d261661bd3b1f7092b8a8c67ad5ffc52

        SHA512

        e51b1281384286731db59f63023b4ba57f6031c3194a7fccf51a7c3c95f891088e16245b2986471d20549a20cd058ae9049a3460d47b5d42c54179ee477f8682

      • C:\Users\Admin\Desktop\DisableReceive.pcx

        Filesize

        613KB

        MD5

        d3a878e908a9200602ab08c3261f213c

        SHA1

        c5d83fa0e016e67cbdadd811aa0e8477521667f1

        SHA256

        89d17464b42c14167f9bb9ea49321d92934384440d54c385e3104fe1f3bc3967

        SHA512

        c009edde2acffafe370f1036325f56b93cef3940b66ee9d8a567a49ed554ef93e05e4d034a52627035b9eb69ad3230c52d091ea94360f44442d5f43a6909a70d

      • C:\Users\Admin\Desktop\EnterSelect.xlt

        Filesize

        438KB

        MD5

        e4f377997476494bbdd6148a2e42e6b6

        SHA1

        bdc1ca5cb0a71061cd5bd9993da7a92e545a891f

        SHA256

        0019de83128b1f2b0fc16b455a5825106eadc670d25db0338c885784ef9c3a53

        SHA512

        8d24cb857ddc7fc5b9ea22a5dfcbf73d8de7abae0e5e4def750bf1a02097e482980be023f3b9882540d716ad9ce0e411c265e37c329e46c2a7c9e5e2a0e71f65

      • C:\Users\Admin\Desktop\InitializeResume.gif

        Filesize

        750KB

        MD5

        b95d038fc4985d5287963f1c45ff0043

        SHA1

        d5add1479ed20cacd21c5e968e45e3e71269c248

        SHA256

        b5815f942aaf72d43f1b32c6042c8e0b1a93aa065927142f6a32ea3217f7feec

        SHA512

        1ec8d0e454a1d9d044b2bc989df083b1dcda73854d9b069920fbc119270a95f820ea004198f9480d3edb62e51c40ef5601ff97d196fd545c63b918c107620ca9

      • C:\Users\Admin\Desktop\InitializeUnprotect.ex_

        Filesize

        535KB

        MD5

        156156ee5c4952c7e6268274dde5de98

        SHA1

        ff37c508e03e345fce8fbbc278ed4486646a9d4b

        SHA256

        7ef92515c187569fbdaf930d72d7da5005704b61feb923f595ccb6cabcad886a

        SHA512

        fc46ee2306d1e1f8408eee5bcb18fe06d6865cd908346ba2dc65e3f09b50db275f845bca777ccb69e949c27f31926bdf4ac72bfa879b38bc117fd3eee2c1bd1c

      • C:\Users\Admin\Desktop\InstallUse.xht

        Filesize

        672KB

        MD5

        4fc0005757ac00e74a4cebf50b8ff467

        SHA1

        654340d190bf768d642eef5057072f95ba21de0c

        SHA256

        bfc5b3616f785878619a1aa6616d58dc95312dc69de29a766d5df68f0d03d323

        SHA512

        86bced6ba4f2a1c583a6e15cfb909588e9fda02a3b72451055f9665427ef32ecaa19c59ed35f6056020d9acc2a9864fcf2476fd26e0f357d183130f17bdae138

      • C:\Users\Admin\Desktop\JoinResume.xml

        Filesize

        652KB

        MD5

        03ec60985feec0f3280af49dfdc4cf5d

        SHA1

        9d39eb9777ae0ae46591931bdbe2ca825b063ecf

        SHA256

        00471976509b7c0343888fbb9ee5304f46dfce162ab85c42a45c08f659601d98

        SHA512

        635a6323f7f85f3aab9b9fd7c24ab08d01c4d5efbdc806384dab08ccb6fe348d7fc5326fc6dc253d6ad037413311c7b00a258c8cc8c85fd418eee87c8bdacb17

      • C:\Users\Admin\Desktop\Microsoft Edge.lnk

        Filesize

        2KB

        MD5

        ef789fec2a1652745ec0d465ccb0a2a5

        SHA1

        6b0d47d33f03adc13b870cc3a591386af3b6c67d

        SHA256

        fe685c21218cd8903c5f0c38962451b781b2382069528d4f5bc583d80571820b

        SHA512

        1551d2f53602ee6359b4ff8ab3ba48be63a1eaaea1faf732bb2b3289ff2656d96164644f78b386457d3fbbe47066cf2c269c636dd4792da9ddc6a7b181e122fb

      • C:\Users\Admin\Desktop\MoveReceive.docx

        Filesize

        594KB

        MD5

        65a9421dac33032b688de781ee0244cb

        SHA1

        0b5884f707dc46880b25c36d1e2bcc68316832de

        SHA256

        885c1124626c6e7c78078587e932fb15e4e14dfbbfa2ab3dd0f413fdf515b38f

        SHA512

        8c9dd06bbeb6f3d81f0bd81ff882ab3f8de67c151b3d52bcd23f9c07075a4271eb9bbbadf6b2c45d3979e0b7c47940fa59476fdd8084020edbdc79b3cbed4611

      • C:\Users\Admin\Desktop\NewUnpublish.html

        Filesize

        691KB

        MD5

        9bf8dbf8d2350c84d3b23aadf8e4618c

        SHA1

        56cf176d3757e5be5bfb856ddb16da9829786cc8

        SHA256

        746dbfb00e8232c6f1237ae1af1c82d42a121f89c215e5a62f10d048924ac64e

        SHA512

        74fb3bf224c6ee1ffb564d08c79f79e8c27fce54f2f6eaafcaaa733381fab2e58d35ebf3451928b26ce4983cd9db9ac40cf0c89a1745e65b716f7353bc12bb87

      • C:\Users\Admin\Desktop\OptimizeTrace.xps

        Filesize

        477KB

        MD5

        654a3289555a2a6001361006881b0f89

        SHA1

        1fc8dfa5d353d8f4f4d44479f8d4da044f700b16

        SHA256

        7a43542821b202ce808bdf9520f97ab7d9f6fb7f22d63a432e2bea815e718f99

        SHA512

        425d7b5f7b7143317bc3ddc434c26e71f7c399b6e2ca4fa657eb5aa89b79903c2993f60c17af0850116bf3dc9fe1444a4acd94380c31c93e8a5c05b46e88d249

      • C:\Users\Admin\Desktop\OutStop.au

        Filesize

        574KB

        MD5

        3311f7aeb303d5940daa5b010dd2feb4

        SHA1

        6d8cded6f26bc4cb9b0219d3261b663ddb12f044

        SHA256

        428b264c5fc0b639e84ed91bb7e929dae95e594eb1b12ab1ae45a59c07fb19ec

        SHA512

        eb6adcaac4af7f4d6d206a61f49f8dea04bd9c47dd518417856c5c52dc70bad59d40ea7bfef4b65a1a8261bc6abe48766581fe0d948e00a73128d215cc3b9537

      • C:\Users\Admin\Desktop\PopConvertTo.mp3

        Filesize

        418KB

        MD5

        c87823d2cb14a0eee51a093de9e5a714

        SHA1

        a47a5f33299633062972ce9208ee1231c02536c8

        SHA256

        92ff2e8118d36fd6f06825457a59812aa601685b43cfef285882eb7560ac4cb3

        SHA512

        42cce254b1e7ebfc6d1c6a61ffbf71ea1dba41167acf89d851950237da7551bc419ae53d353eb2d35e1da73aaebde7734d158c89c947158f2ad6bc4a464a6ad5

      • C:\Users\Admin\Desktop\RegisterMerge.mpp

        Filesize

        730KB

        MD5

        5627865dc7bb2ad7036f4a203b71235c

        SHA1

        c1f66f6550ea0d801d855c207d29da41a49921b2

        SHA256

        a46f51e5111a6fa8369b45934a2fe097db36574f1de9cf8da06cd17a0ed5a1b1

        SHA512

        852ab6ae272e45238b86bef2e35cd2781d91fab65943e76e199c1c28e7d8c4d12c66e3caa99adb9c7abdb8167a29cbf51ef16ef5fcdb078a838cebc598568229

      • C:\Users\Admin\Desktop\RenameReset.avi

        Filesize

        516KB

        MD5

        f19dd4d96097d00df038799fa3d52422

        SHA1

        9c37bfbfbfb956bd7d14e955cf1371dc55787f27

        SHA256

        3b9b091923afafb6153503793642074c913d60e5aa18e1d12d61e22c0aad34f5

        SHA512

        9b9e75e9b19bbefa6d9c992b9f686368bed36cf5e8e1aa51c220f16eb40807123a05611a66e3dbce89340071879e8b17a9915c9e024df44eec57676398fbfea3

      • C:\Users\Admin\Desktop\ResetUpdate.ico

        Filesize

        769KB

        MD5

        9b87c515209948ece53d8d724eae78f8

        SHA1

        c291c9d1247e084e2344378c5a7f7f717266c001

        SHA256

        d8e6df65a91005b4661c33c1bcd010ba7e12f92a3a01c8e9b890f551ac38d331

        SHA512

        527dc65cc41a947e6b3c38ac313b7575470d7d14b421dc774c11a890e24f9850670298c571369c90ad1c4af015523b3d84b26545d66b4217a9f1712497d3ebd0

      • C:\Users\Admin\Desktop\ResetWait.sys

        Filesize

        399KB

        MD5

        4f55ffdc4428b1aefdf3d295c75ca407

        SHA1

        115630e36780abcd8edcb641116bc2bddb1ddb91

        SHA256

        faef28b829defee1ef6b0d531dd326618732a33828397b3aa994e916dd31f1c0

        SHA512

        91c52fad396cb8c25d2f9426789611c3ff6fb289831017240fbae870e0b39faeac41685288874d39b12ca55a345ecbe27ce6b4e77897c23ec45a593e939628b3

      • C:\Users\Admin\Desktop\RestoreMeasure.odp

        Filesize

        301KB

        MD5

        30b1952081bd3d650719ef6b343de628

        SHA1

        97cc9201ef425cd7f7d78409d6bf011fa21a99c8

        SHA256

        477400a4d101b6c54a6b85e6f703edc9734abe4cb92ad57c220606bc9133daf9

        SHA512

        769da5c34fdcec983a351d0621dc2274f5f4c5cdaab5f9f38df301f6fdaa625f495a75cbe062ff1e37afb2b23ea2cc92d8c24c39359376c97e7ddd4ad03c27fa

      • C:\Users\Admin\Desktop\SetRequest.tif

        Filesize

        340KB

        MD5

        6cebbd3bb574cc91c0b0af8b0eb7aa57

        SHA1

        18e768c44ca1a84eb75d3d45afa66cf4f9b5e954

        SHA256

        2823b21bd30239226159277c00d2b3dee84f80a64e32680318e20f687f2bf608

        SHA512

        ce9c824ec1ff7521ef071e9f7a1ea9b64d480c966e37dbd196d83631cdd70a5ed9973e59ca1329e59cbbb57229aa59f899c41ac2a7ccb6749d053bb661d95697

      • C:\Users\Admin\Desktop\SubmitShow.xlsb

        Filesize

        360KB

        MD5

        240f15183d35e0a78a7cc4289f240979

        SHA1

        9c53137ccb5bd8eec0e2c5aa2a125f003ec9180b

        SHA256

        3909485237e53b4e30fd68965150035c54068663c384dd9852733048241a9e0c

        SHA512

        ecbc87a061d08f0d2ab6d75a7fee2247df8b53a52a8bdb83356298cbdbda786bcaf7009fe98f3944d97818f19109eadea32587afff766e6b4c6409eee430a18f

      • C:\Users\Admin\Desktop\SuspendCompress.WTV

        Filesize

        808KB

        MD5

        f77d0b6426f7f0af4ecc72f0d3510539

        SHA1

        a353a2c2bb5235c7a8754f0bc8d636d3d93867fe

        SHA256

        4a78255505e2882a240ef87eb17342a73c1b62ec8c4d6ff98683fb0c71019c11

        SHA512

        c1cc5326c69f6b95fab8a5216cdceddb163a3eb94c808dccf94ff6a68fed84692742a1357b17af963c1e4e5019cde700150f2325bda8a3ecd413778d780d3dd5

      • C:\Users\Admin\Desktop\SyncRegister.temp

        Filesize

        1.1MB

        MD5

        949fa37df5edfc859697879f0c1b987e

        SHA1

        c5e707579a4268057c957c7132dda0d83badd87d

        SHA256

        2f1b9a6193d823811a9f1a208e8ac3ea6a49c87abec0671fe71f8b9a69c54088

        SHA512

        7ccee896dafece812a221dbe16385985a450084a0c99e4530f741667744ecbe52bd3e701831b7381da10804926529ac9ecf5b9f01251c79d6b841f7f4de9ad0f

      • C:\Users\Admin\Desktop\UndoMount.tif

        Filesize

        555KB

        MD5

        e904446794771be094920a22dfba37ad

        SHA1

        fe93c730b629c8265ebdd42608dea4fb35243168

        SHA256

        a131a6570f075eb57529defa5bebf34771398dec3806a0dcbf51bc2cb1d67dfe

        SHA512

        13c683a19f0be41fc8ef7833b188457b1b879e134b763b955cd4a84f5a785dbc3aa97724c37ebf707cc469b858dbed17aa7484fdcd457f713c5b2255580da492

      • C:\Users\Admin\Desktop\UninstallExport.mpeg2

        Filesize

        457KB

        MD5

        f7cee56a48265448645f3abba6afe191

        SHA1

        f618ce9309109dbbddf37e71c58a73c70a700561

        SHA256

        24192e5ccb8e0916269363bd448ef5de83def9d728f37d70be1d1d5f3004d649

        SHA512

        9d1aa7db0ecb93a590330181988aa626dd5851304b2ee0fc48870b88da605d4d131bcf69431db71f38ff9c64a40538f22317ede6b45972c76d18d88578adf7c6

      • C:\Users\Admin\Desktop\UnprotectStep.WTV

        Filesize

        379KB

        MD5

        b7f6936e93b327790449ba24de4f65d4

        SHA1

        84662c7cc1f8a07e6df6d2f55c0f3bc2d7eb0b47

        SHA256

        3ffcedc8e3e65954cd702acb190c474242f8040d803cde175cac350ec911ec68

        SHA512

        1d1ee798153b4e82b25386de59b65a9e45544d4383d1da2e37eaf77ff993150d9474cefb1780103efc64d3ed1f3e5ae761b4b4f3e4298f3b45de6615f3d0c676

      • C:\Users\Admin\Desktop\UnregisterOptimize.svgz

        Filesize

        321KB

        MD5

        bb4f25efbaf87b46c062b7cf6a664198

        SHA1

        c6467b661397ef0a314a13cfea59904f6c2fe0b1

        SHA256

        e47ca1b583c1e4ee2d9721109bbb96865b1c74ba8621b7491d1e16caae0c7ed8

        SHA512

        ddc0693f849f6dc06984eee56ece6ea3f4af4c40bf1f9b29bd5f705a20d0a56323fc90c49dc51ce23dcf0dd6a10fbff2f79b71758b5a067e142b6d0433cebfcb

      • C:\Users\Admin\Desktop\UseSkip.xla

        Filesize

        282KB

        MD5

        6eafcd35c39ff264269789116f39abd1

        SHA1

        bac855f0f2a3d86d8681551a068bb69244bbd358

        SHA256

        460037b040b5ee7a78d51595d7dcb10bc91174ab8eb279b3a6312cce267b1dd4

        SHA512

        c0ec001bf07f4820065f7ff85194804db513f9bf8cb0409df4501c24822d9acc78d31a0fb7a3a1688a57a476c116e2a2838d45738a032a01b285f38fcb39ecf3

      • C:\Users\Public\Desktop\Acrobat Reader DC.lnk

        Filesize

        2KB

        MD5

        9861a6173044bdb4a59f5660d9448f06

        SHA1

        2356eeed7efd3efa2f3701c998df6ae1594340b8

        SHA256

        e80b8dbab8ca0412eb42fd72bf83324e5868b958c54e2423562cccfd86d00ebc

        SHA512

        01149f042d6bb842a27a9a31044887e719e5a60cde7536bb37d59ff2b5d322519bbf6ffb33f0476e127dfe8f2f09e0bf8f8a67b268f101ab6de11be2e759b114

      • C:\Users\Public\Desktop\Firefox.lnk

        Filesize

        1000B

        MD5

        a4731ea6162f412c5ebe804107e9efe3

        SHA1

        3af16933ba720c31837afd30b89e3e7a1a1a790a

        SHA256

        792e81ad2aa7aaaf5590560391303357fe93eb980142392b897cc6dc178274b5

        SHA512

        70bb85380d4bc15218dedd90e36b8b757002835bf06d2aca2ddc9afbff658b8c98256e8edeb3ab0debab6869a2c171c9d0cf0799d039baeb3b194227cc932f33

      • C:\Users\Public\Desktop\Google Chrome.lnk

        Filesize

        2KB

        MD5

        d1b3db02f10adac3236f1908c035f068

        SHA1

        b8ed8950604508fae5e76f0b8011329b2d6a4756

        SHA256

        902c26cf7fe2b1cda0aa7c849bb9676cf6a65ef37b9e7e87d00bced7a1cf0a15

        SHA512

        db20b277f9ca469b9d1e4b64deec5b921efffcc96e2ff5b933598ea6b6189b8439ce5ddbe550afb70d5e36c97c5a2e7da2d7d36e3ac0ae2cc6839a4b349f00c6

      • C:\Users\Public\Desktop\VLC media player.lnk

        Filesize

        923B

        MD5

        ed669a3b2e9a53b9aa1cf6c252dc512f

        SHA1

        4365287e50a5799ec360deb430880f38107d2d11

        SHA256

        6f253b49342812e2f7229ee522626f82a7fdcce81a32a4fa29939337dfb54714

        SHA512

        3ce4cdac2ba2ca9c53e6ae5f34a8f6909cd3adf79c86eb48b201ab5ff88caa41d6280893653a0e4914bc1f9c342fc89e7984557c40f88cb4fa71196377d085de