53c32bef38b637b28d1fee40f68cf723306793eb1a510997741496616a6af623 | Triage

Resubmissions

12-12-2024 07:54

241212-jrvrzsznam 10

12-12-2024 07:49

241212-jn61vaxncs 10

Analysis

max time kernel
435s
max time network
1159s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241211-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
12-12-2024 07:49

Sharing

Report Analysis Logs

General

Target

synapse6.0-windows.zip
Size

115.4MB
MD5

4371ab62b2eb0126d1b6b3d1af2cda9f
SHA1

4d70c244135c645290db5f0a7d987588e05076af
SHA256

53c32bef38b637b28d1fee40f68cf723306793eb1a510997741496616a6af623
SHA512

feaf40300ee3570cadb661fa3460117eee14a5c5937b0c77d84dc5c7d7c1bd8b6f1685142a9de9cac7063c4ba52aad8aef4eb378b2426428848fa3009f3a895f
SSDEEP

3145728:jtjw/ptOTOMR0dth0BZMxkCINwe/zw5vOAHIkzKhRSg:x2ATOI0dthYhwe/EJv7zgSg

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4956	7zFM.exe
Token: 35	4956	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4956	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\synapse6.0-windows.zip"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads