Overview
overview
10Static
static
10Synapse X.zip
windows10-1703-x64
1Synpase/wo..._1.mid
windows10-1703-x64
1Synpase/wo...ia.mid
windows10-1703-x64
1Synpase/wo...ne.mid
windows10-1703-x64
1Synpase/wo...s.json
windows10-1703-x64
3Synpase/wo...ibutes
windows10-1703-x64
3Synpase/wo...DME.md
windows10-1703-x64
3Synpase/wo...n.toml
windows10-1703-x64
3Synpase/wo...er.png
windows10-1703-x64
3Synpase/wo...age.js
windows10-1703-x64
1Synpase/wo...x.toml
windows10-1703-x64
3Synpase/wo...e.toml
windows10-1703-x64
3Synpase/wo...i.rbxm
windows10-1703-x64
3Synpase/wo...pp.lua
windows10-1703-x64
3Synpase/wo...er.lua
windows10-1703-x64
3Synpase/wo...ew.lua
windows10-1703-x64
3Synpase/wo...ar.lua
windows10-1703-x64
3Synpase/wo...le.lua
windows10-1703-x64
3Synpase/wo...en.lua
windows10-1703-x64
3Synpase/wo...ut.lua
windows10-1703-x64
3Synpase/wo...IDI.js
windows10-1703-x64
1Synpase/wo...ng.lua
windows10-1703-x64
3Synpase/wo...ler.js
windows10-1703-x64
1Synpase/wo...te.lua
windows10-1703-x64
3Synpase/wo...id.lua
windows10-1703-x64
3Synpase/wo...ise.js
windows10-1703-x64
1Synpase/wo...al.lua
windows10-1703-x64
3Synpase/wo...til.js
windows10-1703-x64
1Synpase/wo...ad.lua
windows10-1703-x64
3Synpase/wo...nt.lua
windows10-1703-x64
3Synpase/wo...a.json
windows10-1703-x64
3Synpase/wo...2.json
windows10-1703-x64
3Analysis
-
max time kernel
150s -
max time network
160s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system -
submitted
01-04-2023 06:49
Behavioral task
behavioral1
Sample
Synapse X.zip
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
Synpase/workspace/midi/Spooky_Scary_Skeletons_1.mid
Resource
win10-20230220-en
Behavioral task
behavioral3
Sample
Synpase/workspace/midi/Undertale_-_Megalovania.mid
Resource
win10-20230220-en
Behavioral task
behavioral4
Sample
Synpase/workspace/midi/We_Are_Number_One.mid
Resource
win10-20230220-en
Behavioral task
behavioral5
Sample
Synpase/workspace/rostruct/cache/release_tags.json
Resource
win10-20230220-en
Behavioral task
behavioral6
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/.gitattributes
Resource
win10-20230220-en
Behavioral task
behavioral7
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/README.md
Resource
win10-20230220-en
Behavioral task
behavioral8
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/extension.toml
Resource
win10-20230220-en
Behavioral task
behavioral9
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/img/midi-folder.png
Resource
win10-20230220-en
Behavioral task
behavioral10
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/package.js
Resource
win10-20230220-en
Behavioral task
behavioral11
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/roblox.toml
Resource
win10-20230220-en
Behavioral task
behavioral12
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/selene.toml
Resource
win10-20230220-en
Behavioral task
behavioral13
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Assets/ScreenGui.rbxm
Resource
win10-20230220-en
Behavioral task
behavioral14
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Components/App.lua
Resource
win10-20230220-en
Behavioral task
behavioral15
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Components/Controller.lua
Resource
win10-20230220-en
Behavioral task
behavioral16
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Components/Preview.lua
Resource
win10-20230220-en
Behavioral task
behavioral17
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Components/Sidebar.lua
Resource
win10-20230220-en
Behavioral task
behavioral18
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/FastDraggable.lua
Resource
win10-20230220-en
Behavioral task
behavioral19
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/FastTween.lua
Resource
win10-20230220-en
Behavioral task
behavioral20
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Input.lua
Resource
win10-20230220-en
Behavioral task
behavioral21
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/MIDI.js
Resource
win10-20230220-en
Behavioral task
behavioral22
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Song.lua
Resource
win10-20230220-en
Behavioral task
behavioral23
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/TaskScheduler.js
Resource
win10-20230220-en
Behavioral task
behavioral24
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Date.lua
Resource
win10-20230220-en
Behavioral task
behavioral25
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Maid.lua
Resource
win10-20230220-en
Behavioral task
behavioral26
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Promise.js
Resource
win10-20230220-en
Behavioral task
behavioral27
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Signal.lua
Resource
win10-20230220-en
Behavioral task
behavioral28
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/TableUtil.js
Resource
win10-20230220-en
Behavioral task
behavioral29
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Thread.lua
Resource
win10-20230220-en
Behavioral task
behavioral30
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/init.client.lua
Resource
win10-20230220-en
Behavioral task
behavioral31
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/init.meta.json
Resource
win10-20230220-en
Behavioral task
behavioral32
Sample
Synpase/workspace/zeeroxms2.json
Resource
win10-20230220-en
General
-
Target
Synpase/workspace/midi/Spooky_Scary_Skeletons_1.mid
-
Size
8KB
-
MD5
7f5488071421928280845c236f7fac67
-
SHA1
3f08d769d383b85ea2d35711e6822b04e8b3f341
-
SHA256
7babb6529002ed3e0f8532b712846071d2101ad6580926b5059d40bf5941baf0
-
SHA512
9ebc7c2e154dbb85c699cf7444a6ba653ef2917cae574e37c798bcca186a8a7858e3c7ffa4d25290393f5c387bffd0f0ffc9556897099b96d5837f1d522862d1
-
SSDEEP
192:saxLCtZOt/1/bG3JSx7iuSiuXEdEb++iuSiuXEdEbuK+:rLCtZOthG3JI7iuSiuXEdEb++iuSiuXS
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
vlc.exepid process 4820 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
vlc.exepid process 4820 vlc.exe -
Suspicious use of FindShellTrayWindow 8 IoCs
Processes:
vlc.exepid process 4820 vlc.exe 4820 vlc.exe 4820 vlc.exe 4820 vlc.exe 4820 vlc.exe 4820 vlc.exe 4820 vlc.exe 4820 vlc.exe -
Suspicious use of SendNotifyMessage 7 IoCs
Processes:
vlc.exepid process 4820 vlc.exe 4820 vlc.exe 4820 vlc.exe 4820 vlc.exe 4820 vlc.exe 4820 vlc.exe 4820 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
vlc.exepid process 4820 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Synpase\workspace\midi\Spooky_Scary_Skeletons_1.mid"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4820