Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
29/09/2024, 18:27
Behavioral task
behavioral1
Sample
Synapse.Z.exe
Resource
win7-20240903-en
General
-
Target
Synapse.Z.exe
-
Size
712.0MB
-
MD5
e7bda1f1b3150e1436adfa87bbe25307
-
SHA1
d5056028f468c1cf95d8aa38b1522c67c99ca97b
-
SHA256
02a802ac33889f32fa8792832883bc8f3e2da2fdbede78626127f8afe3b5e4a2
-
SHA512
b51a01700c71df2b5333696154105300ce5cce4f1ac5b3ff6c8112e2b866915e4e1b4cbdaf590910b577890088a5ab699bc77ad475823a1da1760ee915393ea1
-
SSDEEP
98304:ahSi8x9XQsD91urErvz81LpWjjUa50ZtPvYRt2e4GFNGjfzfbIbApJo4EAKhOC1I:aIP9VD3urErvI9pWjgfPvzm6gsFE14AI
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2868 Synapse.Z.exe -
resource yara_rule behavioral1/files/0x000500000001a46a-21.dat upx behavioral1/memory/2868-23-0x000007FEF5D20000-0x000007FEF6312000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2820 wrote to memory of 2868 2820 Synapse.Z.exe 30 PID 2820 wrote to memory of 2868 2820 Synapse.Z.exe 30 PID 2820 wrote to memory of 2868 2820 Synapse.Z.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD5ccdbd8027f165575a66245f8e9d140de
SHA1d91786422ce1f1ad35c528d1c4cd28b753a81550
SHA256503cd34daed4f6d320731b368bbd940dbac1ff7003321a47d81d81d199cca971
SHA512870b54e4468db682b669887aeef1ffe496f3f69b219bda2405ac502d2dcd67b6542db6190ea6774abf1db5a7db429ce8f6d2fc5e88363569f15cf4df78da2311