General
-
Target
https://github.com/cfedss/Synapse-X-Revamped/releases/tag/Relase1.5
-
Sample
240530-xhvyaagb5y
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/cfedss/Synapse-X-Revamped/releases/tag/Relase1.5
Resource
win10v2004-20240508-en
windows10-2004-x64
15 signatures
300 seconds
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
Windows Update
C2
skbidiooiilet-31205.portmap.host:31205
Mutex
b2f09b33-2e5b-4ffa-afbf-3f1aaed274a6
Attributes
-
encryption_key
6F721445F7E0B1CF58980D84A9D49F4458D4EFD9
-
install_name
Update.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
WindowsUpdate
-
subdirectory
Windows Update
Targets
-
-
Target
https://github.com/cfedss/Synapse-X-Revamped/releases/tag/Relase1.5
Score10/10-
Quasar payload
-
Executes dropped EXE
-