Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
59s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
24/04/2023, 18:46
General
-
Target
synapse.exe
-
Size
8KB
-
MD5
4506834ae8d565ab52b2809540835d45
-
SHA1
ba6f9abcbd5f26013499b254a389b365f53049fd
-
SHA256
278f0fc06d1e17fc3994304f6aa0304128a189f0ec68ec95853bc0b119206e59
-
SHA512
883af1ad6cac152f552674a679b25d88dea0d236aa7aac1371afd0bf3b768d496e8768c020a83423368e2994d3bc13bf79a811fb8b45d8a3397a040d60d15e53
-
SSDEEP
192:Q/Sg1iGoiZX9llYeM0arl/DcMcbK2m7oim5Y+eLbM:Q/Sg1Nvlljarl/6u2woiaA
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\synapse.exe"C:\Users\Admin\AppData\Local\Temp\synapse.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
408KB
-
Filesize
584KB
-
Filesize
64KB