Overview

overview

10

Static

static

10

Synapse Devbuild.exe

windows7-x64

7

Synapse Devbuild.exe

windows10-2004-x64

9

Resubmissions

04/11/2024, 17:09

241104-vpfqtssqez10

04/11/2024, 17:09

241104-vpcdeasqex10

04/11/2024, 17:09

241104-vpbrwatgmj

04/11/2024, 17:09

241104-vn7sxstglr10

03/11/2024, 15:43

241103-s5zsjaxjdv10

03/11/2024, 15:41

241103-s4xa1szrbq10

03/11/2024, 14:18

241103-rmmvksypaj10

Analysis

  • max time kernel
    17s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    04/11/2024, 17:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Synapse Devbuild.exe
  • Size 77.6MB
  • Sample241104-vpcdeasqex
  • SHA256 6e38cdf8c60d606ca321617213830bb5f70b479cd8d096322a82679ab6906768
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 7 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Synapse Devbuild.exe
    "C:\Users\Admin\AppData\Local\Temp\Synapse Devbuild.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2348
    • C:\Users\Admin\AppData\Local\Temp\Synapse Devbuild.exe
      "C:\Users\Admin\AppData\Local\Temp\Synapse Devbuild.exe"
      2⤵
      • Loads dropped DLL
      PID:2148

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23482\api-ms-win-core-file-l1-2-0.dll
        • Size 20KB
        • SHA256 0dc1f695befddb8ee52a308801410f2f1d115fc70668131075c2dbcfa0b6f9a0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23482\api-ms-win-core-localization-l1-2-0.dll
        • Size 20KB
        • SHA256 dc570708327c4c8419d4cced2a162d7ca112a168301134dd1fb5e2040eee45b6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23482\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 20KB
        • SHA256 19b018be16afe143fb107ef1dd5b8e6c6cb45966806eb3d31ec09ff0dc2b70d1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23482\python312.dll
        • Size 1.7MB
        • SHA256 7d35a191edb95ccd85ef05d645deeca3ed1febd9acd659569fab56ae06c1ebdf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23482\ucrtbase.dll
        • Size 1.1MB
        • SHA256 d2ebd8719455ae4634d00fd0d0eb0c3ad75054fee4ff545346a1524e5d7e3a66
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path \Users\Admin\AppData\Local\Temp\_MEI23482\api-ms-win-core-file-l2-1-0.dll
        • Size 20KB
        • SHA256 18655793b4d489f769327e3c8710aced6b763c7873b6a8dc5ae6f28d228647f4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path \Users\Admin\AppData\Local\Temp\_MEI23482\api-ms-win-core-timezone-l1-1-0.dll
        • Size 20KB
        • SHA256 24f4530debf2161e0d0256f923b836aeccc3278a6ff2c9400e415600276b5a6d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/2148-1323-0x000007FEF6320000-0x000007FEF69E5000-memory.dmp
        Download