Overview

overview

3

Static

static

3

EncryptSynaptics.exe

windows7-x64

3

EncryptSynaptics.exe

windows10-2004-x64

3

Synaptics ...��.exe

windows7-x64

1

Synaptics ...��.exe

windows10-2004-x64

1

Synaptics ...��.pdf

windows7-x64

1

Synaptics ...��.pdf

windows10-2004-x64

1

偷梁换�...��.pdf

windows7-x64

1

偷梁换�...��.pdf

windows10-2004-x64

1

未封装E...cs.exe

windows7-x64

3

未封装E...cs.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    03fe3b3d924dea9e125be37afac048ab8b064f49cfe13cf2d4c4e3e794ede850

  • Size

    4.6MB

  • MD5

    5e379b4fd167cf58ee82c3150db5c90e

  • SHA1

    1a8cd49daa01f7a9c8257eb68f9f8999531aed49

  • SHA256

    03fe3b3d924dea9e125be37afac048ab8b064f49cfe13cf2d4c4e3e794ede850

  • SHA512

    044524c32f6ad5680e676fc72964486898e1294fcd0d0457d8a0084ac607f9cf4f856edfaf836b09a56a96c92bcdfaa829d2984022aef3c8ea5d676b4967f429

  • SSDEEP

    98304:4lxmAGGUElDSQsiG2rNK9S3xNYDac0M2IFYV9R2qw0A1+JUp1ESN:4lxRDUElb5vK9yxNY0MVs9wT8yp1f

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 03fe3b3d924dea9e125be37afac048ab8b064f49cfe13cf2d4c4e3e794ede850
    .zip
  • EncryptSynaptics.com
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Synaptics 蠕虫病毒感染解决方案.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Synaptics 蠕虫病毒感染解决方案.pdf
    .pdf

    • https://www.52pojie.cn/#

  • 偷梁换柱：谨防“Synaptics”蠕虫病毒.pdf
    .pdf
  • 未封装EncryptSynaptics.com
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections