e415185bfb73ffbb19998b75dbf869adac06bdabbf699d6c5a75d3d3b424d3aa | Triage

Sharing

General

Target

SynapseX Launcher.exe
Size

21.4MB
Sample

240201-wxf71adhep
MD5

289d4e7dde655f722a03384b5baa0519
SHA1

cf543b250337f9d2a081c0443cb6833de0c51faa
SHA256

e415185bfb73ffbb19998b75dbf869adac06bdabbf699d6c5a75d3d3b424d3aa
SHA512

f648d61c174af6be241608e84aa4fb5eedeed93906d281dd727e47d5bb14d89243cae43634788bfa4a83f40253f9a05fee2ec6df1d6ec5230710497fe352e587
SSDEEP

393216:8MU5jgLxdyJhoonb3pR1obI/fL2Vmd6mI/m3pmVBkqQCwYhBJH6JmxWvUA7dcG:8JczyJ+UjpR1h/fyVmdiKm3hZNBoF8AG

Score

7^/10

pyinstaller spyware stealer

Malware Config

Targets

- Target
  
  SynapseX Launcher.exe
- Size
  
  21.4MB
- MD5
  
  289d4e7dde655f722a03384b5baa0519
- SHA1
  
  cf543b250337f9d2a081c0443cb6833de0c51faa
- SHA256
  
  e415185bfb73ffbb19998b75dbf869adac06bdabbf699d6c5a75d3d3b424d3aa
- SHA512
  
  f648d61c174af6be241608e84aa4fb5eedeed93906d281dd727e47d5bb14d89243cae43634788bfa4a83f40253f9a05fee2ec6df1d6ec5230710497fe352e587
- SSDEEP
  
  393216:8MU5jgLxdyJhoonb3pR1obI/fL2Vmd6mI/m3pmVBkqQCwYhBJH6JmxWvUA7dcG:8JczyJ+UjpR1h/fyVmdiKm3hZNBoF8AG
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1