General
- Target SynapseLauncher.exe
- Size 2.9MB
- Sample260704-a15twad18m
- SHA256 bfb5182b67958ee4dd76f0739eaf7bd9765c10e9948806cc611b3f2283ebe7ad
- MD5 6703f37c5ee5da2313c5fcfd1cb2f0f6
- SHA1 fb739ea36b034bd5de5792fff40e79901098e19e
- SHA512 3da43a897eb8c57cec960884d00fda90be354e609b5f95c541bec4dd745fe027a80b7c627f8eef2ab57fca60fa84153ec52d1ad1316d2a700115fc1a3c9ea53a
- SSDEEP 49152:cB6/7Yx/dDx+4B2VQtVPxUdmL5yLacSSNru8bD5lWVNbBjLZSN8BohFpqLabDfsZ:cx9xjYWEWsmSg8bHWVZBjLZS2Bo/pmaM
- TLSH T1AFD523E834527024D7E3687AFF0317557EE36602186EE6726322EE2CE3FD2405B53996
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SynapseLauncher.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
SynapseLauncher.exe
Resource
win11ltsc2024-20260629-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target SynapseLauncher.exe
- Size 2.9MB
- SHA256 bfb5182b67958ee4dd76f0739eaf7bd9765c10e9948806cc611b3f2283ebe7ad
- MD5 6703f37c5ee5da2313c5fcfd1cb2f0f6
- SHA1 fb739ea36b034bd5de5792fff40e79901098e19e
- SHA512 3da43a897eb8c57cec960884d00fda90be354e609b5f95c541bec4dd745fe027a80b7c627f8eef2ab57fca60fa84153ec52d1ad1316d2a700115fc1a3c9ea53a
- SSDEEP 49152:cB6/7Yx/dDx+4B2VQtVPxUdmL5yLacSSNru8bD5lWVNbBjLZSN8BohFpqLabDfsZ:cx9xjYWEWsmSg8bHWVZBjLZS2Bo/pmaM
- TLSH T1AFD523E834527024D7E3687AFF0317557EE36602186EE6726322EE2CE3FD2405B53996
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.