Overview

overview

10

Static

static

10

SynapseXCRACKED.exe

windows7-x64

10

SynapseXCRACKED.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-06-2024 13:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SynapseXCRACKED.exe

  • Size

    78KB

  • MD5

    0ddd31e824f136e691bcfd2a0b9e2670

  • SHA1

    34269cbd62e9badc52af71b2759575593a762fac

  • SHA256

    1302d9f863c25bae202e553ef078f73d8c0324deff52d8388f7525872519a5bb

  • SHA512

    786c994267fbe21e86ee829928b3d24cfa52890214700d5c2bede0232c05f13329ff605e908433c661dd4b7fc24b6a570a79c74f70e0504a43f80ff90d3d1fcb

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+2PIC:5Zv5PDwbjNrmAE+yIC

Score
10/10
discordratpersistenceratrootkitstealer

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTEyOTI2NjIyNzkxOTk5MDgyNA.GInBmi.k0vV9HhM26FUzP8r3lgj8t304PciR2dvNYNKDQ

  • server_id

    1129494586109206538

Signatures

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SynapseXCRACKED.exe
    "C:\Users\Admin\AppData\Local\Temp\SynapseXCRACKED.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3704-1-0x00007FF919CC3000-0x00007FF919CC5000-memory.dmp
    Filesize

    8KB

    Download
  • memory/3704-0-0x000001B790720000-0x000001B790738000-memory.dmp
    Filesize

    96KB

    Download
  • memory/3704-2-0x000001B7AAE30000-0x000001B7AAFF2000-memory.dmp
    Filesize

    1.8MB

    Download
  • memory/3704-3-0x00007FF919CC0000-0x00007FF91A781000-memory.dmp
    Filesize

    10.8MB

    Download
  • memory/3704-4-0x000001B7AB630000-0x000001B7ABB58000-memory.dmp
    Filesize

    5.2MB

    Download
  • memory/3704-5-0x00007FF919CC0000-0x00007FF91A781000-memory.dmp
    Filesize

    10.8MB

    Download