Analysis

  • max time kernel
    132s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 05:01

General

  • Target

    Synapse X Revive/bin/Editor.html

  • Size

    2KB

  • MD5

    0145c9de8b438a651cd4b395f206c602

  • SHA1

    e4b41a44ab858b1afb673bb1d7b7910e09868342

  • SHA256

    4b7bd42f22032c4afbf8e31dda5f919a0102b89da2f2021ba60eed56be4265e1

  • SHA512

    3b66a1d881bb1f5e7b468406f082ae48b1f466bcd2af30789a58df25976b1bd5a22f5017c141d37d075e633b6ad27d9a138143c64c843e92ed4d712a1dfacd36

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\Synapse X Revive\bin\Editor.html"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2928
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2928 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2148

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1199aa6d9456c5ca54adf06ce02d0475

          SHA1

          f692da3853ad48ac3059971de3c241cd3742f86d

          SHA256

          5432b60a2472de552365488dbeb27bb60de412af11c00b9962b88d801bf1cf2c

          SHA512

          c2c94e58bb263180db1149a24178bdadef32d71b7eec180ab84bbb46f04f3073d387d1088a4faedd8854680d92d4605dfb8df48f2557b289649097abcf16230d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a8f6250fe01e866bec422080bf86f523

          SHA1

          cc382236139c53aed73ea3370bdf50fc62e75cfc

          SHA256

          91aca576e759c996602643161c9f3cd585cb169711073b0542da002a82b57b78

          SHA512

          ac6e64a2f9ae9c06e94c5f9987406b6779bc89624eb21805fc38ded9f41b31c7db8ac756dc91360765837ff0fd0240125e826361818fe0c005c2bce512aa88a8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b791004c641e33821c0d13ad4c78029a

          SHA1

          1579268ce760e26b14d7dcfeb5a67f10a46296c7

          SHA256

          1dbcb24edb038802c5ef555cf8a0a50715e2b271f50f3193c5cbc67b56ce968a

          SHA512

          884bd7a289c367ec8fa0b100b4824055cdfd70187272b6ad536cdedd31841fe64ca24e74662541966d66e289fdff9fbd89c21f1906b9520801e46036ded7ae98

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          76687ce1b9c8f26ed43b74e515cf354e

          SHA1

          66ea80b2a2da1d90d6e23d6d03f6a8019917418a

          SHA256

          7c125cdeb495503751b2ad39d08990cd1d204fbac4964e3bb55f275fb6c44539

          SHA512

          44e529acaef0cc0b9402dcac02b23563c082a4fef1397c0c56f2fc980591f5fa90fbc3aace783b18a080a88531a11b063ed1df41274a422130593af30962755f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b0dc5628bb9eac20fe762908f840049f

          SHA1

          5916b28d74175d1ea539cd4ab16ce6b3f512d500

          SHA256

          fd6bf9f19e437847358c66b817888e89c39a41aac4d4a12044e51405ffb2b77f

          SHA512

          74f5dea58b091efe35f893b4668c50c1aabefff9d385726719d48e2073d781961c54918c658029c30eba17a802b8b51db1efdf873d65170b53c87aa63251447b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6582de234f7b5a1155b4d743c6d6278d

          SHA1

          b8e98b5e7f3bb9b5e12363962f6ea654137d29c0

          SHA256

          76c7217732325457f2aef6ca266cb4bb88c5331f798209d1d0fb0cd48d0587f7

          SHA512

          ed7351a7bb6f401d0fc5867adee0035d54c4c41764df6132eacc8a77e7fb704cdba3a9bce31b9fed81d8633ba2333f7764c747f17b2136f5919b1fdfa5d2b909

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2b777ff30b26bdf1a56072723217e9c8

          SHA1

          6e6e26829407374d38ed55d66c579d6b9bccd15d

          SHA256

          fac3c919adaa715d6dd279e1cdf046dfd7509df885435eac2d66e0df06bace0e

          SHA512

          68501070bbbb1c77e5aa4455f23259dd5ec79401f671ee6875de164d04ec76add22db51adc83ec1ca1b79dd8c7a828fc36df5f1f1a07c5777a25af6567c6cf5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e0d4b6b01beb4e4f8c827e1afc814e70

          SHA1

          36aa842691d294f0f9919a1974c79d66644a3f8f

          SHA256

          3fc476f9f70f07010d536d0a4f8bf110e9595e26be72a85acd9f21df6ab3280f

          SHA512

          2e647b02de6e0061677cd66565cbde40f6353819b85d257f394248ee883edbff0d185b2f12b94af2a2fa57990a36f1dcac2a9bf8a1582b84f7d46ddedf05bb0d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          35d986d0ec452ad57cdd07610cf0a204

          SHA1

          9ba2535ea50fa5e619944cf9efc01c30e52de883

          SHA256

          7b20726ff18e03ab898f7a0cbc381ef8dc00765aef834e973a25fdf1d3769895

          SHA512

          d38d0d8c1b3aae92815aebc9a45cea4e2afadfe8097cfd3561c23e4294795f3a1dec00d361c4d37b8a288dd265bb754c0a643b0e138a3db79595517cc6f73d54

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          900a28739a1e5e50544ecf39def323c5

          SHA1

          6e63c8c3fe6610d5af995dee9da833d84104e16c

          SHA256

          1947ecdfffaf790b88b2373ec5d47af6e52062869a0ea29718e2fd5888f2a508

          SHA512

          2af63e79a76adb21df5f16e934137ed2288dbbbb094ace5f81bed9bfae4e2e86a834a3e68485baf92897098c4983c0e56974dc43c26c9ff653c2e91fd90fb734

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          96f4ff6f43675f4d98adb6c651b52bef

          SHA1

          a906a67fae8b3e38603c82fa49fff0d95cdcb6cf

          SHA256

          d5567c8b6e221ab1941bd4998ab4355e9842c7d2254f21a5b353fef5937c805c

          SHA512

          4440e635619b00f0d9dc9ca03e28f5600cc470d5ce9ec91cb62386c364fe4f148133f97fbefbccfe1425e80e695fb2af59f9d7aee22ea09c634d48f1e872af61

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f00adaa913ba4d05ef0f9eadcb342e2c

          SHA1

          cd1384af240a8b0a62cc75696375571d91b1b5a0

          SHA256

          e26f47015b0614c3d9820762ef6a2828755957a1a23279f09b678a661f8e0d59

          SHA512

          3ce3ad7d1155b3c854f8b1a3d4fdb9383b13f558daf54aa51ac77cd33a84fb655d9d1ccc95a742e6a8bb5f3bd10a177dd4fed6fca5704573cae3891015f4a55e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a01b9080c9116a68a73df8a9654c7a00

          SHA1

          9dac963182e9225cd97b86ea2b0afafb17eb3bdf

          SHA256

          73d54f8c36690bbd7e9c35d1485552504153be86d39bed5d41c8ef937a13fc36

          SHA512

          46887e12fffa901e5e6f0d894f62720aba28fde4d24885c88b906dc68bdb59fedceca6cff172a7184386331964dfd1361920c7d3de0c41bb71e389b8492a6f38

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fd23a2b7d92462516e8ae43720f28dd5

          SHA1

          47583cceeefcd2b058dba61143fc93cc050dc83e

          SHA256

          020f85fc31babf3afe5ad249c388f56c7aef5e100a29296010763b2662578223

          SHA512

          38f387688ee64320a13bb94cc79b2a45d6170c891a896e9c9b1816b747af1b38386ea1dde1459b4961f004f22594227c53dbefc6dc7aa36b70956c0d5f01a348

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          58fa344f8c5ec895c5c5335a8eb85192

          SHA1

          54f95146ae08c0db8d98328c76213fe638bebc36

          SHA256

          846a65c8608a01e2012fe38a799ab1a13fa5d2eb8dcabb66109a243b80bdf4ed

          SHA512

          e37a990d8312e688bc4e0d70161cd44c33f23aafe2a364aaed60d7fbb9aa67255fd10ddaf19581fb6b9315e75fef73a2bd413670b464b7cd370fb70f95b329c1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          97a0f54a964609ad9f2de840c74d3c24

          SHA1

          c762c3bf1a9ff5b075d8f3a200d264ecbf4af1d3

          SHA256

          8b02527032cc1402ccdc9bed406e1864f0ae40bc4ea3bfc0669624370cf2f279

          SHA512

          0314f6b6973f7b1f55833f160ed3b05bcd7eed157e11d674d5226816aa654c816c16b5fde43d04c9920ad7e90d41289075a5e80d6dadd9c59a617a94d3450dab

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b5b1be39fbab8d2e4529bbc29ab1bbdc

          SHA1

          4b012d3c8aa9931978e73111e053d43475c4b5e0

          SHA256

          d773ce9e4a7995417f0bbb4303036140a8a68560218a719dd51ce1a5fb538546

          SHA512

          7aab9426608d90f17b69eed8d55749f2c9eb6a49e523a8fe3c751976a82c3c5b37dd82cf11e7d382594ddbf4f8b3e5fa5e2a47f1a43190615dc91e4c18dce184

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          46a40b71878f21bf2f115ff240fabe5c

          SHA1

          05ca87ee7b1d0579aa35c7576ac75f7872ab0512

          SHA256

          1ae83ee55b43b92ad99ced1d34d94fac371488a8681b837ef726fb9496ca7d79

          SHA512

          ec64e17944d03542fdf778e71c211a393833af9ceb1edf042062154c3026b41a4a55c18d680ca31428ed0f9c72da0d783674a75803b5b8b572da999d5b3968ca

        • C:\Users\Admin\AppData\Local\Temp\Cab2740.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar2833.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b