Analysis
-
max time kernel
1791s -
max time network
1569s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
23-11-2024 17:04
General
-
Target
SynapseLauncher.exe
-
Size
5.1MB
-
MD5
0048a1911839e7b7999b62094e63cd84
-
SHA1
bc646d549c9a3dca8ab17314984029333e863bef
-
SHA256
6527b3540e93faebb9ad37addbb7ce92dee8bfa8514458fe953ad191801c27d2
-
SHA512
7263dfe2d4bce3d1da6099228383ba2768cec5193385e6d9b49cf098102f3718b55db392177a9d307ccb4ef7c1e1000feab0ddf0350aade96774ff4e0e968d28
-
SSDEEP
98304:IbXpR9Qy7Rh9KDmNzIorcZgML9XLKALq2BapfYoyFoWhrAnYr0o+K4:WXp57TNzIUO9XOAuKapAXFoWhcYrV14
Score
9/10
Malware Config
Signatures
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer 5 IoCs
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SynapseLauncher.exe"C:\Users\Admin\AppData\Local\Temp\SynapseLauncher.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Checks whether UAC is enabled
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12.9MB
-
Filesize
8KB
-
Filesize
12.9MB
-
Filesize
12.9MB
-
Filesize
12.9MB
-
Filesize
12.9MB