8e0a4daa8a87412949cf16d1377a859d23ff44257ebccb3f4e46acf0ac6c34f4 | Triage

Analysis

max time kernel
27s
max time network
29s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
17-10-2024 14:58

Sharing

Report Analysis Logs

General

Target

Synapse X remake.exe
Size

102.7MB
MD5

bfc3c2dc0d3458c53071c96cf6daedf9
SHA1

c77a605e10e4a20107f80e2b1a15eeb146d785ef
SHA256

8e0a4daa8a87412949cf16d1377a859d23ff44257ebccb3f4e46acf0ac6c34f4
SHA512

b3e76e99f0441f224a0cdf43c3715145431a11a89afb6b65478d9aa557ecd29d9604750dad4618d449e3ae651475924e11f24527a59de5d1ff786eea81bb1afd
SSDEEP

3145728:ynGFL88S6xjKcBanL2qHO5iV2unGQbRe0zJcBeuZ2:NZHSWNaBHCi11XcBi

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2056	Synapse X remake.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1804 wrote to memory of 2056	1804	Synapse X remake.exe	31
PID 1804 wrote to memory of 2056	1804	Synapse X remake.exe	31
PID 1804 wrote to memory of 2056	1804	Synapse X remake.exe	31

C:\Users\Admin\AppData\Local\Temp\Synapse X remake.exe
"C:\Users\Admin\AppData\Local\Temp\Synapse X remake.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1804
- C:\Users\Admin\AppData\Local\Temp\Synapse X remake.exe
  "C:\Users\Admin\AppData\Local\Temp\Synapse X remake.exe"
  2⤵
  - Loads dropped DLL
  PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI18042\python312.dll

Filesize
6.6MB

MD5
b243d61f4248909bc721674d70a633de

SHA1
1d2fb44b29c4ac3cfd5a7437038a0c541fce82fc

SHA256
93488fa7e631cc0a2bd808b9eee8617280ee9b6ff499ab424a1a1cbf24d77dc7

SHA512
10460c443c7b9a6d7e39ad6e2421b8ca4d8329f1c4a0ff5b71ce73352d2e9438d45f7d59edb13ce30fad3b4f260bd843f4d9b48522d448310d43e0988e075fcb

Download Submit