General
- Target Synapse-X-Lua-Script-Injector-for-Roblox-Game-Development-io.zip
- Size 59.2MB
- Sample260623-sl3ebadz3v
- SHA256 61d18bf36acb613c57211e456839469837e59bc2d9a09e9cdda663f8566cecd3
- MD5 af413e9a9c8c1676f5ecf19df9c948d6
- SHA1 f51181d692a2d234bc57215b0b3eb4545456ef1e
- SHA512 f43ca38972799804687ddf99ff914bad5c3bac8690c2366ed4c08a46fd7c1a2b3a8fe39b8f96d07e2c6bd290034fac36caae12eae9854d07d6e3a11dfb8b28f6
- SSDEEP 1572864:SOwARxZJTcRbh21LCKOeydHn3xs6aHXDukJzF:ZwARxT43mCoKn3tAyk5F
- TLSH T11DD733E98CB50CAA606EAD545730664749ECF935928FC60F03868FBFF1C6379A735620
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
30 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 72.8MB
- SHA256 b1e081014d9ca0d112ce6d271e0b362f54bcd710b1a735ba882fa0e85965c324
- MD5 f26653ae33e951a8cea42384540baa1b
- SHA1 d793dff1dec80228b5f050ef39d77bb5a509de3c
- SHA512 14d1e4ed15b829052e738221fca05d440d6c2b6e33f2fe3171db9dfa5ad87e69ebf707b8ffb17a505f80fc861320bc66248c7f21522d0348f67d2f9556ecf4a5
- SSDEEP 393216:QUg986LruEsT5NNtYTVvGDyqfw/X7T32N0KXOytE221G098F9mgfAUe/xtojfMDP:QUF6+cyRMgIQ8AwRvxOOxbFz
- TLSH T13AF76B46A3EA04D5E9FB9A3489E65213D673BC063F3085DF324C172A1F736E09976722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Enumerates processes with tasklist
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1