Overview
overview
10Static
static
10Synapse X.zip
windows10-1703-x64
1Synpase/wo..._1.mid
windows10-1703-x64
1Synpase/wo...ia.mid
windows10-1703-x64
1Synpase/wo...ne.mid
windows10-1703-x64
1Synpase/wo...s.json
windows10-1703-x64
3Synpase/wo...ibutes
windows10-1703-x64
3Synpase/wo...DME.md
windows10-1703-x64
3Synpase/wo...n.toml
windows10-1703-x64
3Synpase/wo...er.png
windows10-1703-x64
3Synpase/wo...age.js
windows10-1703-x64
1Synpase/wo...x.toml
windows10-1703-x64
3Synpase/wo...e.toml
windows10-1703-x64
3Synpase/wo...i.rbxm
windows10-1703-x64
3Synpase/wo...pp.lua
windows10-1703-x64
3Synpase/wo...er.lua
windows10-1703-x64
3Synpase/wo...ew.lua
windows10-1703-x64
3Synpase/wo...ar.lua
windows10-1703-x64
3Synpase/wo...le.lua
windows10-1703-x64
3Synpase/wo...en.lua
windows10-1703-x64
3Synpase/wo...ut.lua
windows10-1703-x64
3Synpase/wo...IDI.js
windows10-1703-x64
1Synpase/wo...ng.lua
windows10-1703-x64
3Synpase/wo...ler.js
windows10-1703-x64
1Synpase/wo...te.lua
windows10-1703-x64
3Synpase/wo...id.lua
windows10-1703-x64
3Synpase/wo...ise.js
windows10-1703-x64
1Synpase/wo...al.lua
windows10-1703-x64
3Synpase/wo...til.js
windows10-1703-x64
1Synpase/wo...ad.lua
windows10-1703-x64
3Synpase/wo...nt.lua
windows10-1703-x64
3Synpase/wo...a.json
windows10-1703-x64
3Synpase/wo...2.json
windows10-1703-x64
3Analysis
-
max time kernel
163s -
max time network
179s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system -
submitted
01-04-2023 06:49
Behavioral task
behavioral1
Sample
Synapse X.zip
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
Synpase/workspace/midi/Spooky_Scary_Skeletons_1.mid
Resource
win10-20230220-en
Behavioral task
behavioral3
Sample
Synpase/workspace/midi/Undertale_-_Megalovania.mid
Resource
win10-20230220-en
Behavioral task
behavioral4
Sample
Synpase/workspace/midi/We_Are_Number_One.mid
Resource
win10-20230220-en
Behavioral task
behavioral5
Sample
Synpase/workspace/rostruct/cache/release_tags.json
Resource
win10-20230220-en
Behavioral task
behavioral6
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/.gitattributes
Resource
win10-20230220-en
Behavioral task
behavioral7
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/README.md
Resource
win10-20230220-en
Behavioral task
behavioral8
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/extension.toml
Resource
win10-20230220-en
Behavioral task
behavioral9
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/img/midi-folder.png
Resource
win10-20230220-en
Behavioral task
behavioral10
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/package.js
Resource
win10-20230220-en
Behavioral task
behavioral11
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/roblox.toml
Resource
win10-20230220-en
Behavioral task
behavioral12
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/selene.toml
Resource
win10-20230220-en
Behavioral task
behavioral13
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Assets/ScreenGui.rbxm
Resource
win10-20230220-en
Behavioral task
behavioral14
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Components/App.lua
Resource
win10-20230220-en
Behavioral task
behavioral15
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Components/Controller.lua
Resource
win10-20230220-en
Behavioral task
behavioral16
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Components/Preview.lua
Resource
win10-20230220-en
Behavioral task
behavioral17
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Components/Sidebar.lua
Resource
win10-20230220-en
Behavioral task
behavioral18
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/FastDraggable.lua
Resource
win10-20230220-en
Behavioral task
behavioral19
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/FastTween.lua
Resource
win10-20230220-en
Behavioral task
behavioral20
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Input.lua
Resource
win10-20230220-en
Behavioral task
behavioral21
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/MIDI.js
Resource
win10-20230220-en
Behavioral task
behavioral22
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Song.lua
Resource
win10-20230220-en
Behavioral task
behavioral23
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/TaskScheduler.js
Resource
win10-20230220-en
Behavioral task
behavioral24
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Date.lua
Resource
win10-20230220-en
Behavioral task
behavioral25
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Maid.lua
Resource
win10-20230220-en
Behavioral task
behavioral26
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Promise.js
Resource
win10-20230220-en
Behavioral task
behavioral27
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Signal.lua
Resource
win10-20230220-en
Behavioral task
behavioral28
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/TableUtil.js
Resource
win10-20230220-en
Behavioral task
behavioral29
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Thread.lua
Resource
win10-20230220-en
Behavioral task
behavioral30
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/init.client.lua
Resource
win10-20230220-en
Behavioral task
behavioral31
Sample
Synpase/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/init.meta.json
Resource
win10-20230220-en
Behavioral task
behavioral32
Sample
Synpase/workspace/zeeroxms2.json
Resource
win10-20230220-en
General
-
Target
Synpase/workspace/midi/Undertale_-_Megalovania.mid
-
Size
25KB
-
MD5
08a745dacc80fd74272e4b53f9c1b4d8
-
SHA1
38bc957dcdc56f82519cb420a9eccde26fb987cc
-
SHA256
df44d4daf35ea423eec1375f6dabb59c00a1e79fb47d7973f083361d41d6b57c
-
SHA512
c9e24effede5744b054d91d35dd5c991b6e86d903c166b8b3d30564a4c1c73819cc872bd5a01aee4f798b5c15d16f6deef070b15d76ae89ccfd9adfa4b052f61
-
SSDEEP
192:Z5GWo/WmWj4gPWA+WAu6OWPTWO6pWQrWmWBVWmWvWsYWs1lUUUUUUUCsHsmneXWa:94gY1AQYSl
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
vlc.exepid process 1556 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
vlc.exepid process 1556 vlc.exe -
Suspicious use of FindShellTrayWindow 7 IoCs
Processes:
vlc.exepid process 1556 vlc.exe 1556 vlc.exe 1556 vlc.exe 1556 vlc.exe 1556 vlc.exe 1556 vlc.exe 1556 vlc.exe -
Suspicious use of SendNotifyMessage 6 IoCs
Processes:
vlc.exepid process 1556 vlc.exe 1556 vlc.exe 1556 vlc.exe 1556 vlc.exe 1556 vlc.exe 1556 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
vlc.exepid process 1556 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Synpase\workspace\midi\Undertale_-_Megalovania.mid"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1556