Overview

overview

10

Static

static

1

Synapse Launcher.exe

windows7-x64

9

Synapse Launcher.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Synapse Launcher.exe

  • Size

    787KB

  • Sample

    230331-rj2jkabb8t

  • MD5

    154e1239c1bb0e04b18f27aabffcd6e7

  • SHA1

    0c72c4db91b8ae7e10271aece8db7efb5271f8ec

  • SHA256

    93fc4441b3648a74d3bc72cc5f34ced564ceca74a5e560961178b42a6c8416b0

  • SHA512

    52d4b91f4610a53ad41e0c73d129b218551ebb70e2162e1c268d84030dc77bc5411926a15fa44ba62f1a93e1c757287c842a217ea25602fac0db157742ee2a05

  • SSDEEP

    6144:ARv5ZcPe5q67ue+MNhH0X4wz2HA/z0OqysLAilL2hJO5Hp2y9z89S49htWZ1BXtx:ARv5OIbhH0IwzyE8LyspL9z89x+zHFi

Score
10/10
lummaevasionstealertrojan

Malware Config

Targets

    • Target

      Synapse Launcher.exe

    • Size

      787KB

    • MD5

      154e1239c1bb0e04b18f27aabffcd6e7

    • SHA1

      0c72c4db91b8ae7e10271aece8db7efb5271f8ec

    • SHA256

      93fc4441b3648a74d3bc72cc5f34ced564ceca74a5e560961178b42a6c8416b0

    • SHA512

      52d4b91f4610a53ad41e0c73d129b218551ebb70e2162e1c268d84030dc77bc5411926a15fa44ba62f1a93e1c757287c842a217ea25602fac0db157742ee2a05

    • SSDEEP

      6144:ARv5ZcPe5q67ue+MNhH0X4wz2HA/z0OqysLAilL2hJO5Hp2y9z89S49htWZ1BXtx:ARv5OIbhH0IwzyE8LyspL9z89x+zHFi

    Score
    10/10
    evasiontrojanlummastealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Downloads MZ/PE file

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Credential Access

Discovery

Query Registry

4
T1012

Virtualization/Sandbox Evasion

1
T1497

System Information Discovery

4
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks