General

  • Target

    aSynthor1.4.zip

  • Size

    13.9MB

  • MD5

    1806fc971eec3719f9ba579dbfb4235d

  • SHA1

    0089cdbf3a6e7991df3bd8d6ce093dee1a91f087

  • SHA256

    f67c400b40e25f04f371c46e8caebaed6d1caed9c54cf7e1548ad58d63c9e6c6

  • SHA512

    07b0729bb72e341c8a7691dd64b9c7d0d0a48030c7b2f9bc2bafb35aae2ca56527912fe242944eb7236fbb1a7a1786aa219e96fb073ff805e54a64bd5a906199

  • SSDEEP

    196608:35pN5rYsPKZ7SrrKdcXRo810OrIwL9K45J6NZR+7K032HlosLyv8QBxGEK/K+MiP:3950s1rKdcB9jTL9/JwRNCmeHywN2pv

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • aSynthor1.4.zip
    .zip
  • aSynthor1.4/Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • aSynthor1.4/Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • aSynthor1.4/Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • aSynthor1.4/Synthor.dll
    .dll windows:6 windows x64 arch:x64

    a223f56e7902e83acaa81d4183486990


    Headers

    Imports

    Exports

    Sections

  • aSynthor1.4/SynthorInterface.deps.json
  • aSynthor1.4/SynthorInterface.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • aSynthor1.4/SynthorInterface.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • aSynthor1.4/SynthorInterface.runtimeconfig.json
  • aSynthor1.4/bin/Monaco/index.html
    .html .js polyglot
  • aSynthor1.4/bin/Monaco/vs/base/worker/workerMain.js
    .js
  • aSynthor1.4/bin/Monaco/vs/basic-languages/lua/lua.js
  • aSynthor1.4/bin/Monaco/vs/editor/editor.main.css
  • aSynthor1.4/bin/Monaco/vs/editor/editor.main.js
    .js
  • aSynthor1.4/bin/Monaco/vs/editor/editor.main.nls.de.js
  • aSynthor1.4/bin/Monaco/vs/editor/editor.main.nls.es.js
  • aSynthor1.4/bin/Monaco/vs/editor/editor.main.nls.fr.js
  • aSynthor1.4/bin/Monaco/vs/editor/editor.main.nls.it.js
  • aSynthor1.4/bin/Monaco/vs/editor/editor.main.nls.ja.js
  • aSynthor1.4/bin/Monaco/vs/editor/editor.main.nls.js
  • aSynthor1.4/bin/Monaco/vs/editor/editor.main.nls.ko.js
  • aSynthor1.4/bin/Monaco/vs/editor/editor.main.nls.ru.js
  • aSynthor1.4/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • aSynthor1.4/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • aSynthor1.4/bin/Monaco/vs/loader.js
    .js
  • aSynthor1.4/bin/editor.lua
  • aSynthor1.4/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • aSynthor1.4/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • aSynthor1.4/runtimes/win-arm64/native/WebView2Loader.dll
  • aSynthor1.4/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • aSynthor1.4/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • aSynthor1.4/workspace/.tests/appendfile.txt
  • aSynthor1.4/workspace/.tests/getcustomasset.txt
  • aSynthor1.4/workspace/.tests/isfile.txt
  • aSynthor1.4/workspace/.tests/listfiles/test_1.txt
  • aSynthor1.4/workspace/.tests/listfiles/test_2.txt
  • aSynthor1.4/workspace/.tests/loadfile.txt
  • aSynthor1.4/workspace/.tests/readfile.txt
  • aSynthor1.4/workspace/.tests/writefile
  • aSynthor1.4/workspace/.tests/writefile.txt
  • aSynthor1.4/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • aSynthor1.4/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections