General

  • Target

    Synapse-X-Revamped-main.zip

  • Size

    12.4MB

  • MD5

    79a56ccfbe243356983bf2726e358b87

  • SHA1

    e47f1e239cf6cd0a19c75ca1da3575b54baf2c07

  • SHA256

    aaf20e1523773d6a7f05297cb48c01b63ce2538ea47403191ff6cdc9f364b148

  • SHA512

    7eeecec2b97bef9cb81b4d5c0d5733fe1217e8281bc482f6bc15187d8d15f6dec84a561917afe346029a5c11c088d3d6bc6aea3f63263f5c2b560cee1521309e

  • SSDEEP

    196608:BS1K3wLGciyPBpxMlHtB+C3rcmrMxyeAO+53AZw7Y2CrzTLaBjPJWvj1YpXHHx4w:BSk9iBvU/7VrERDUUw7iTqJ/RWw

Score
10/10

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Windows Update

C2

espinyskibidi-29823.portmap.host:29823

Mutex

a94ba996-69af-4720-85e6-f4929c5eb0f8

Attributes
  • encryption_key

    6F721445F7E0B1CF58980D84A9D49F4458D4EFD9

  • install_name

    Update.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Windows Update Startup

  • subdirectory

    Windows Update

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Synapse-X-Revamped-main.zip
    .zip
  • Synapse-X-Revamped-main/CefSharp.BrowserSubprocess.Core.dll
    .dll windows:6 windows x86 arch:x86

    fde2444b18b6216754e4fc4814644d8e


    Headers

    Imports

    Exports

    Sections

  • Synapse-X-Revamped-main/CefSharp.Core.dll
    .dll windows:6 windows x86 arch:x86

    af78785d32f8a71e4fa9e723274794fb


    Headers

    Imports

    Exports

    Sections

  • Synapse-X-Revamped-main/CefSharp.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Synapse-X-Revamped-main/CefSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Synapse-X-Revamped-main/Synapse X Launcher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Synapse-X-Revamped-main/SynapseInjector.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Synapse-X-Revamped-main/chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    6c7f78b513ad182e8a21e1896f38ccbc


    Headers

    Imports

    Exports

    Sections

  • Synapse-X-Revamped-main/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    0f31485cd3d6d36b416b744fa9701f28


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Synapse-X-Revamped-main/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    ecadf61e50ed499e76a9b050ab8fff13


    Headers

    Imports

    Exports

    Sections

  • Synapse-X-Revamped-main/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    ed3ad6807e7e18eb58140ee5ec71275a


    Headers

    Imports

    Exports

    Sections