General

  • Target

    SynapseX.revamaped.V1.2.rar

  • Size

    159.0MB

  • MD5

    8d82f7ed4c78733c50a3063ca4e4532a

  • SHA1

    2051551c6c0f18eaf3c4cf45ffe6119e582c19ae

  • SHA256

    a6208f462177955192b13b4e514cada4f845103cad76b998746d09f98afad2f0

  • SHA512

    df0111583caff8f0f6816db5840b65f79dce1aa28676ce73ad4637fabd14a31fb60fe788bfcd74fed3038d2a2ebf469e081d8506de6dedc987ecc11b58ea1dba

  • SSDEEP

    3145728:DXqMQ+crhy8Vm/7kNm6kUhA9DxSs8FpSHNnIBnPmKuLT8gf/c2A:DXtQ+cD0/7DUh8LIBnPgX8B2A

Score
10/10

Malware Config

Extracted

Family

xenorat

C2

anyone-blogging.gl.at.ply.gg

Mutex

Xeno_rat_nd8912d

Attributes
  • delay

    500

  • install_path

    temp

  • port

    22284

  • startup_name

    Windows

Signatures

  • Xenorat family
  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • SynapseX.revamaped.V1.2.rar
    .rar
  • SynapseX revamaped V1.2/Synapse X Bootstrapper.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SynapseX revamaped V1.2/auth/internal/3132e54eb7c.bin
  • SynapseX revamaped V1.2/bin/359k6u5HUNL4tEk.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SynapseX revamaped V1.2/bin/CefSharp.BrowserSubprocess.Core.dll
    .dll windows:6 windows x86 arch:x86

    fde2444b18b6216754e4fc4814644d8e


    Headers

    Imports

    Exports

    Sections

  • SynapseX revamaped V1.2/bin/CefSharp.BrowserSubprocess.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SynapseX revamaped V1.2/bin/CefSharp.Core.dll
    .dll windows:6 windows x86 arch:x86

    af78785d32f8a71e4fa9e723274794fb


    Headers

    Imports

    Exports

    Sections

  • SynapseX revamaped V1.2/bin/CefSharp.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SynapseX revamaped V1.2/bin/CefSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SynapseX revamaped V1.2/bin/Editor.html
    .html .js polyglot
  • SynapseX revamaped V1.2/bin/JTYGLdAQoGLS.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • SynapseX revamaped V1.2/bin/OoxIi8qtt.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SynapseX revamaped V1.2/bin/SynapseInjector.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • SynapseX revamaped V1.2/bin/bps/EMIL LÄS.txt
  • SynapseX revamaped V1.2/bin/chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    6c7f78b513ad182e8a21e1896f38ccbc


    Headers

    Imports

    Exports

    Sections

  • SynapseX revamaped V1.2/bin/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    0f31485cd3d6d36b416b744fa9701f28


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SynapseX revamaped V1.2/bin/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    ecadf61e50ed499e76a9b050ab8fff13


    Headers

    Imports

    Exports

    Sections

  • SynapseX revamaped V1.2/bin/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    ed3ad6807e7e18eb58140ee5ec71275a


    Headers

    Imports

    Exports

    Sections

  • SynapseX revamaped V1.2/bin/libcef.dll
    .dll windows:5 windows x86 arch:x86

    a497d92372a39dde8de16f8ca8258ded


    Headers

    Imports

    Exports

    Sections

  • SynapseX revamaped V1.2/bin/lua-decomp.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections