Behavioral task
behavioral1
Sample
SynapseX.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
SynapseX.exe
Resource
win10v2004-20240802-en
General
-
Target
SynapseX.exe
-
Size
162KB
-
MD5
9f0f9363f4af30834830f79e6f4b106d
-
SHA1
fe1c65aee19fdb22e01ef6b8085e9ef7f129a198
-
SHA256
31dbefdd19d9ed9d055841fba2677de2a4cc70085b0684398b36a03d542d402a
-
SHA512
85b9475811a88ee3b3210a81ee921a0e57c715fc86cc9e4e1ca53f2d0413ca68f31fe7af9706ac18282e4f1c6a4fa2c3df03d02a3aeda20dd44dcb6d32bd1645
-
SSDEEP
3072:CCAeqTJF7ExgiVY8sBSPxCn7ksSKn/H+:DA+8+C7dSWv+
Malware Config
Extracted
mercurialgrabber
https://discordapp.com/api/webhooks/919253082930561024/1ZkyHALR4HtVMamDsSo-GHiRzv_ZdttSm1dB3hEFn814XR0ZI9vUjPFpkcrUkoXxQ7nt
Signatures
-
Mercurialgrabber family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SynapseX.exe
Files
-
SynapseX.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ