General

  • Target

    synapse-v2-launcher-12-5-22.zip

  • Size

    80.3MB

  • MD5

    9e0aeab6cb22ef80c202fab5181b8a2d

  • SHA1

    6177bc2b7e233a04153dcdfef59276f88100ce30

  • SHA256

    4a0f85cd7c39f90298bd752547765b58f7823cadd424c9f3ae54235bb894af35

  • SHA512

    a622aabb0b8e9192df0c5bb57a3ccb80a87ef33d8bd23ff97481f1055c9d5bc2bfca11c394dcae46d0c44ff0bb5a0ecbb3203fda608f0623455f1608c233685c

  • SSDEEP

    1572864:3DWCwerG4hPvcfaaW1NnHdnpgHUjEWOceVE0SOBSOddN:3D3weyIAaJnHdnp4UgWFeVE0SOBSOdX

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Client Server Runtime Process

C2

botnetps.ddns.net:7788

Mutex

73a7a3ae-9e7f-4634-9425-80eaaded0637

Attributes
  • encryption_key

    86012C170FF838996242C2B7E10C4FB0D28A8729

  • install_name

    RobloxStudioLauncherBeta.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Update

  • subdirectory

    Roblox

Signatures

  • Lumma family
  • Quasar family
  • Quasar payload 1 IoCs

Files

  • synapse-v2-launcher-12-5-22.zip
    .zip
  • synapse-v2-launcher-12-5-22/README.txt
  • synapse-v2-launcher-12-5-22/Synapse Launcher.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • synapse-v2-launcher-12-5-22/auth/options.bin
  • synapse-v2-launcher-12-5-22/bin/Brw4jzg7i.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • synapse-v2-launcher-12-5-22/bin/CefSharp.BrowserSubprocess.Core.dll
    .dll windows x86

    fde2444b18b6216754e4fc4814644d8e


    Headers

    Imports

    Exports

    Sections

  • synapse-v2-launcher-12-5-22/bin/CefSharp.BrowserSubprocess.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • synapse-v2-launcher-12-5-22/bin/CefSharp.Core.dll
    .dll windows x86

    af78785d32f8a71e4fa9e723274794fb


    Headers

    Imports

    Exports

    Sections

  • synapse-v2-launcher-12-5-22/bin/CefSharp.Wpf.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • synapse-v2-launcher-12-5-22/bin/CefSharp.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • synapse-v2-launcher-12-5-22/bin/SLAgent.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • synapse-v2-launcher-12-5-22/bin/SynapseInjector.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • synapse-v2-launcher-12-5-22/bin/TrKWzbH9xolzCI9U.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • synapse-v2-launcher-12-5-22/bin/cef.pak
  • synapse-v2-launcher-12-5-22/bin/cef_100_percent.pak
    .js
  • synapse-v2-launcher-12-5-22/bin/cef_200_percent.pak
    .js
  • synapse-v2-launcher-12-5-22/bin/cef_extensions.pak
    .js
  • synapse-v2-launcher-12-5-22/bin/chrome_elf.dll
    .dll windows x86

    6c7f78b513ad182e8a21e1896f38ccbc


    Headers

    Imports

    Exports

    Sections

  • synapse-v2-launcher-12-5-22/bin/d3dcompiler_47.dll
    .dll windows x86

    0f31485cd3d6d36b416b744fa9701f28


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • synapse-v2-launcher-12-5-22/bin/debug.log
  • synapse-v2-launcher-12-5-22/bin/devtools_resources.pak
  • synapse-v2-launcher-12-5-22/bin/icudtl.dat
  • synapse-v2-launcher-12-5-22/bin/libEGL.dll
    .dll windows x86

    ecadf61e50ed499e76a9b050ab8fff13


    Headers

    Imports

    Exports

    Sections

  • synapse-v2-launcher-12-5-22/bin/libGLESv2.dll
    .dll windows x86

    ed3ad6807e7e18eb58140ee5ec71275a


    Headers

    Imports

    Exports

    Sections

  • synapse-v2-launcher-12-5-22/bin/libcef.dll
    .dll windows x86

    a497d92372a39dde8de16f8ca8258ded


    Headers

    Imports

    Exports

    Sections

  • synapse-v2-launcher-12-5-22/bin/snapshot_blob.bin
  • synapse-v2-launcher-12-5-22/bin/theme-wpf.json
  • synapse-v2-launcher-12-5-22/bin/v8_context_snapshot.bin