Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
01-10-2024 05:28
Behavioral task
behavioral1
Sample
Synapse X.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Synapse X.exe
Resource
win10v2004-20240802-en
General
-
Target
Synapse X.exe
-
Size
44.0MB
-
MD5
24054a793dbef0bac103e34b2562ee83
-
SHA1
defc2e6e91e0136f2dffbf8a425db8b8f29c348f
-
SHA256
db8cd6e3b3a5a6c0ac092c74bcebf554d593f6ea6d7fd7257a7f3094e48b593f
-
SHA512
29c181728a4e8c5b13103874673390f57a01c1e4eff5262a13090ce6b3fbf0f7f9bdc90a341bd01dfb171cd464df21c0f945013979b7a4335b92f5a9acc8abe8
-
SSDEEP
98304:RvmDjWM8JEE1rdGamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYKJJcGhEIf:Rvm0heNTfm/pf+xk4dWRptrbWOjgrS
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2612 Synapse X.exe -
resource yara_rule behavioral1/files/0x0005000000019244-22.dat upx behavioral1/memory/2612-24-0x000007FEF5890000-0x000007FEF5E78000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2820 wrote to memory of 2612 2820 Synapse X.exe 30 PID 2820 wrote to memory of 2612 2820 Synapse X.exe 30 PID 2820 wrote to memory of 2612 2820 Synapse X.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD5bb46b85029b543b70276ad8e4c238799
SHA1123bdcd9eebcac1ec0fd2764a37e5e5476bb0c1c
SHA25672c24e1db1ba4df791720a93ca9502d77c3738eebf8b9092a5d82aa8d80121d0
SHA5125e993617509c1cf434938d6a467eb0494e04580ad242535a04937f7c174d429da70a6e71792fc3de69e103ffc5d9de51d29001a4df528cfffefdaa2cef4eaf31