General

  • Target

    Synapse Z.zip

  • Size

    9.4MB

  • MD5

    5acda0dfadf407a955bc8f439f3806de

  • SHA1

    dd7b5253504c2e8b1579ef31edcd24dc1441a7db

  • SHA256

    377646ff4a732a0b99ec1bab50223dd0204c94dba1ab377c944f162352f5bb58

  • SHA512

    957b3a31917c269b674752efc7c03dfc45a7e77bde701bb5db5af0d53406dead24ad49733b9af5774fff60e119fa214c1fab9f6696937caffa6d6d44b344bf2f

  • SSDEEP

    196608:guLcRyl099rxG8Ll87NlOUHbljNxyXmemeEVHK+Xw1BzasU1EF:gzMuHnMZxNeYH3X8eszF

Score
7/10

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Synapse Z.zip
    .zip
  • Synapse Z/bin/auth.syn
  • Synapse Z/bin/dr0h9kp6oxpntvxf.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • Synapse Z/bin/gtxypw0k.dll
    .dll windows:6 windows x64 arch:x64

    d774ae95f4f4b551bedc95dda8c7a523


    Headers

    Imports

    Sections

  • Synapse Z/bin/launch.syn
  • Synapse Z/crashlogs/19736_3020.txt
  • Synapse Z/voEZaBoA2vncwauZ.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • Synapse Z/workspace/.tests/getcustomasset.txt
  • Synapse Z/workspace/.tests/readfile.txt
  • Synapse Z/workspace/IY_FE.iy
  • Synapse Z/workspace/SNC-Results.txt
  • Synapse Z/workspace/ThunderClientUUID.txt
  • Synapse Z/workspace/dca3e69649ed196af0ac6577f743a0ae-cache.lua
    .js