Overview
overview
3Static
static
3sym - Copy...52.dll
windows7-x64
1sym - Copy...52.dll
windows10-2004-x64
1sym - Copy...ox.dll
windows7-x64
1sym - Copy...ox.dll
windows10-2004-x64
1sym - Copy...PI.dll
windows7-x64
1sym - Copy...PI.dll
windows10-2004-x64
1sym - Copy...no.dll
windows7-x64
1sym - Copy...no.dll
windows10-2004-x64
1sym - Copy...64.dll
windows7-x64
1sym - Copy...64.dll
windows10-2004-x64
1sym - Copy...64.dll
windows7-x64
1sym - Copy...64.dll
windows10-2004-x64
1sym - Copy...sh.dll
windows7-x64
1sym - Copy...sh.dll
windows10-2004-x64
1sym - Copy...td.dll
windows7-x64
3sym - Copy...td.dll
windows10-2004-x64
1sym - Copy/cxapis.dll
windows7-x64
1sym - Copy/cxapis.dll
windows10-2004-x64
1sym - Copy... m.exe
windows7-x64
1sym - Copy... m.exe
windows10-2004-x64
1sym - Copy...che.js
windows7-x64
3sym - Copy...che.js
windows10-2004-x64
3Analysis
-
max time kernel
150s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2024, 04:04
Static task
static1
Behavioral task
behavioral1
Sample
sym - Copy/Bunifu_UI_v1.52.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
sym - Copy/Bunifu_UI_v1.52.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
sym - Copy/FastColoredTextBox.dll
Resource
win7-20241023-en
Behavioral task
behavioral4
Sample
sym - Copy/FastColoredTextBox.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
sym - Copy/SynapseZAPI.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
sym - Copy/SynapseZAPI.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
sym - Copy/bin/Xeno.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
sym - Copy/bin/Xeno.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
sym - Copy/bin/libcrypto-3-x64.dll
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
sym - Copy/bin/libcrypto-3-x64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
sym - Copy/bin/libssl-3-x64.dll
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
sym - Copy/bin/libssl-3-x64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
sym - Copy/bin/xxhash.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
sym - Copy/bin/xxhash.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
sym - Copy/bin/zstd.dll
Resource
win7-20241023-en
Behavioral task
behavioral16
Sample
sym - Copy/bin/zstd.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
sym - Copy/cxapis.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
sym - Copy/cxapis.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
sym - Copy/synapse m.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
sym - Copy/synapse m.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
sym - Copy/workspace/002c19202c9946e6047b0c6e0ad51f84-cache.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
sym - Copy/workspace/002c19202c9946e6047b0c6e0ad51f84-cache.js
Resource
win10v2004-20241007-en
General
-
Target
sym - Copy/synapse m.exe
-
Size
276KB
-
MD5
c67f5debffc7711f68e0865a7d3b3fbc
-
SHA1
4bd5cde6f143254ab62909d85b3a9da3a4a7e153
-
SHA256
94b22108ee4c8b7b49874af8724155014cf71e581dbb2186969b4a67cd69f456
-
SHA512
3cd1e0d80aae26d41b687d585a0f9f5e15c6172fb257056a16ea5dc618c1a2095c5b6d40b960557be212b0bb558c4baaa95c2948336fce72d6e2e3a4c2b96fef
-
SSDEEP
768:T+1Y2DH8O+lCiLHuWTURIp40EawEjLZLFiR16Pb7kkRGMMkpQvTXyFaOlzOw9:TdlKQkwEOZLFiR1EbgkkMJQvTXyFim
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe 2928 synapse m.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2928 synapse m.exe