General
-
Target
SynapseDowngrader.exe
-
Size
600KB
-
Sample
240829-xhcrpsxgnp
-
MD5
8c48b5f9d5efc74bfb95390ea23f2db7
-
SHA1
76e3c2b597164b9009c65f421e87abfc3b3e412b
-
SHA256
21829708b9a4864c95b5f388fb3e0e850c2f1e04e17f093e6e6bb7d7f383e913
-
SHA512
de80367169c7862ec66505c84c42be1134c16c9c19a8f1344d6ed9dd1d7510fe993cc249b077c2e61c2f3cdd2555930eef50f44e287fb42ef11b00593229a28f
-
SSDEEP
12288:Egby/bP2s/c9DO3LOBCjey8al5+mAIG+dGRqCW77UZh:Egby/bP2sIDULOBCjlvWI7GRk2
Static task
static1
Behavioral task
behavioral1
Sample
SynapseDowngrader.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
SynapseDowngrader.exe
-
Size
600KB
-
MD5
8c48b5f9d5efc74bfb95390ea23f2db7
-
SHA1
76e3c2b597164b9009c65f421e87abfc3b3e412b
-
SHA256
21829708b9a4864c95b5f388fb3e0e850c2f1e04e17f093e6e6bb7d7f383e913
-
SHA512
de80367169c7862ec66505c84c42be1134c16c9c19a8f1344d6ed9dd1d7510fe993cc249b077c2e61c2f3cdd2555930eef50f44e287fb42ef11b00593229a28f
-
SSDEEP
12288:Egby/bP2s/c9DO3LOBCjey8al5+mAIG+dGRqCW77UZh:Egby/bP2sIDULOBCjlvWI7GRk2
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-