General

  • Target
    Syntex Hwid Spoofer.zip
  • Size 8.2MB
  • Sample260417-3ev2rsdv3w
  • SHA256 2402fc6024a738982e7b88fab305e8e89e4229b6d2c3996f36cda71e536d778e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Targets

    • Target
      Syntex Hwid Spoofer/ScriptHelper.dll
    • Size 30KB
    • SHA256 9293b9b6eff1d730157e6d50f5f2623791502cfaf97554dec18cb6f25a384da1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Syntex Hwid Spoofer/Syntex Spoofer.exe
    • Size 160KB
    • SHA256 de941e4b442a45f3a6f8529165aebed643b2ce61b885e17bdff43160c518d343
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks