Overview
overview
9Static
static
3seenapse v...ne.zip
windows11-21h2-x64
9Synapse Bo...er.exe
windows11-21h2-x64
9config/_pr...id.css
windows11-21h2-x64
3config/_pr...ds.css
windows11-21h2-x64
3config/_pr...an.css
windows11-21h2-x64
3config/_pr...ic.css
windows11-21h2-x64
3config/_pr...ht.css
windows11-21h2-x64
3config/_pr...vo.css
windows11-21h2-x64
3config/_pr...nt.css
windows11-21h2-x64
3config/_pr...to.css
windows11-21h2-x64
3config/_pr...on.css
windows11-21h2-x64
3config/_pr...en.css
windows11-21h2-x64
3config/_pr...oi.css
windows11-21h2-x64
3config/context.bin
windows11-21h2-x64
3config/devmode.json
windows11-21h2-x64
3config/edi...s.json
windows11-21h2-x64
3config/edi...r.json
windows11-21h2-x64
3config/edi...r.json
windows11-21h2-x64
3config/language.json
windows11-21h2-x64
3config/meta.bin
windows11-21h2-x64
3config/plugins.json
windows11-21h2-x64
3config/settings.json
windows11-21h2-x64
3config/synui.ini
windows11-21h2-x64
3config/theme.json
windows11-21h2-x64
3config/windows.json
windows11-21h2-x64
3flags.json
windows11-21h2-x64
3Analysis
- max time kernel
267s - max time network
280s - platform
windows11-21h2_x64 - resource
win11-20241007-en - resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system - submitted
02/11/2024, 01:20
Static task
static1
Behavioral task
behavioral1
Sample
seenapse v3 not mine.zip
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
Synapse Bootstrapper.exe
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
config/_prebuilt-coolkid.css
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
config/_prebuilt-elysian-fields.css
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
config/_prebuilt-freeman.css
Resource
win11-20241007-en
Behavioral task
behavioral6
Sample
config/_prebuilt-hollywood-classic.css
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
config/_prebuilt-hollywood-light.css
Resource
win11-20241007-en
Behavioral task
behavioral8
Sample
config/_prebuilt-hollywood-novo.css
Resource
win11-20241007-en
Behavioral task
behavioral9
Sample
config/_prebuilt-hw-fluent.css
Resource
win11-20241007-en
Behavioral task
behavioral10
Sample
config/_prebuilt-kyoto.css
Resource
win11-20241007-en
Behavioral task
behavioral11
Sample
config/_prebuilt-neon.css
Resource
win11-20241007-en
Behavioral task
behavioral12
Sample
config/_prebuilt-seven.css
Resource
win11-20241023-en
Behavioral task
behavioral13
Sample
config/_prebuilt-unikoi.css
Resource
win11-20241007-en
Behavioral task
behavioral14
Sample
config/context.bin
Resource
win11-20241007-en
Behavioral task
behavioral15
Sample
config/devmode.json
Resource
win11-20241007-en
Behavioral task
behavioral16
Sample
config/editor/bookmarks.json
Resource
win11-20241007-en
Behavioral task
behavioral17
Sample
config/editor/languageserver.json
Resource
win11-20241007-en
Behavioral task
behavioral18
Sample
config/editor/sidebar.json
Resource
win11-20241007-en
Behavioral task
behavioral19
Sample
config/language.json
Resource
win11-20241007-en
Behavioral task
behavioral20
Sample
config/meta.bin
Resource
win11-20241007-en
Behavioral task
behavioral21
Sample
config/plugins.json
Resource
win11-20241007-en
Behavioral task
behavioral22
Sample
config/settings.json
Resource
win11-20241007-en
Behavioral task
behavioral23
Sample
config/synui.ini
Resource
win11-20241007-en
Behavioral task
behavioral24
Sample
config/theme.json
Resource
win11-20241007-en
Behavioral task
behavioral25
Sample
config/windows.json
Resource
win11-20241023-en
Behavioral task
behavioral26
Sample
flags.json
Resource
win11-20241007-en
General
- Target config/meta.bin
- Size 550B
- Sample241102-bqdhbawkax
- SHA256 a05f6df635872f5ff0f54553ed6e2c1edeb41b188b6ae70315f4e807d3583035
- MD5 1ffb69e29b41f5f93d7803d4e994045b
- SHA1 64e76b634d29793e5a14daae2a67b22d0a5dad1e
- SHA512 b2ff28444509e3dd69f1fd769a089bfab66f7d73421478dd16f547355e11c5dfde71c2299ee8d92d0bb3a80563c13ab56dcd84209a79d4d0cdd90a3cc698176a
- MD5 SHA1 SHA512
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2580 OpenWith.exe