101dcc7a915f8071860efbc0e9a66b69c8833e3021bf0b2f944ac0de99fa60fe

Sharing

Copy URL Twitter E-mail

General

Target
Synapse_Launcher.zip
Size 2.3MB
Sample260715-mhydashy5j
SHA256 101dcc7a915f8071860efbc0e9a66b69c8833e3021bf0b2f944ac0de99fa60fe
MD5 4be41a98e653964c7e4209e9be9b6a44
SHA1 ed9cc8aa9a704d5ea84558b2fce0c7974ad68144
SHA512 b8ff8ec90b70f42f635c4be670ff483ce36e5cc7ce31a1019901befb41ab16becab4561bb21ee37a5884cfc5f31722224a6ad8736dfd6382e1f4653534f7ac85
SSDEEP 49152:/YNCq1zw55uBK/as/5WtncitWfReZZJLpSi0BN2IBlDTpRfffHJfNYTlDBiSKn:ANCfIsYlZZJl99qFFRfffUPiSw
TLSH
T112B5331B884A1007FA62EDBA679515E708406AFA9EF3F4DF5360401E6C9BFBE5C543C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Synapse_Launcher.zip
- Size 2.3MB
- SHA256 101dcc7a915f8071860efbc0e9a66b69c8833e3021bf0b2f944ac0de99fa60fe
- MD5 4be41a98e653964c7e4209e9be9b6a44
- SHA1 ed9cc8aa9a704d5ea84558b2fce0c7974ad68144
- SHA512 b8ff8ec90b70f42f635c4be670ff483ce36e5cc7ce31a1019901befb41ab16becab4561bb21ee37a5884cfc5f31722224a6ad8736dfd6382e1f4653534f7ac85
- SSDEEP 49152:/YNCq1zw55uBK/as/5WtncitWfReZZJLpSi0BN2IBlDTpRfffHJfNYTlDBiSKn:ANCfIsYlZZJl99qFFRfffUPiSw
- TLSH
  T112B5331B884A1007FA62EDBA679515E708406AFA9EF3F4DF5360401E6C9BFBE5C543C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Synapse x Launcher/Firebase.dll
- Size 89KB
- SHA256 df6b645357bf26405955b183ce2d30b4efd6c9531de1943262235bbee282c5a8
- MD5 cca4b09d41103efb354515d28861138b
- SHA1 7b8555f0d0bd19272282574c8997e80aeb26fa2e
- SHA512 0e7b909246025fae0b36d926b92acbd83a0bcccea339a1e2a0ddbf98e860fd28af35ccedfe0f2797a1812aced775f9dcd6f35fcba57c3f6aaaa240cecae3471f
- SSDEEP 1536:hi/uYKcDrA4+FZp9ppZZlC3RUiaZ+iyh7b:dYKcDsJZsBUrZ+ii7
- TLSH
  T155937D00B36C6722D6EF97FE756492578BB2E503E892A7897D8CF2F00C623457D1139A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Synapse x Launcher/Firebase.xml
- Size 91KB
- SHA256 9d47399a84f0d89ce75ede98fb7238f7ec5ecfd81c75c0c8a343205add221999
- MD5 20606e5fcdaf974f5241486d056ca3ca
- SHA1 adeb374f970ca5c2811ede7f365931a4cb3b2e8e
- SHA512 469385491e85fd31f6a74567e85da41729059a15cbdbf8dd2fb67007d5113323703ab78865169e2a3f1a6f693bec10ad4e781fc7f0889fc3794a406aabe93573
- SSDEEP 1536:leMLPu4ahqIaSYmOeiypuZu7rLWmQUpYIZVtlBjLH0NWGFi8cO4e86DTxrnC:ry72IZVtlBjLH0NBi8cO4e86DtnC
- TLSH
  T1E193DB2477C6EF51497B01468E29F498FA281D633199684170CEAFB33F36CA375BB990
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  Synapse x Launcher/FirebaseAdmin.dll
- Size 290KB
- SHA256 e8b1b80401f732cf6dac42cd0a7c9b671c6c0f58b10420b7a88a2526eab4eff0
- MD5 a4afdfff9770f18406f1a6480dff77c1
- SHA1 5094ac66846ec99f4a56462499cc54c897a8289d
- SHA512 ef615d476579d6d8f8204e2f276dcaed94548394f6238e3913627e4d1f4346d3b4cc4c3ffcea80e4c3d941c0248672623b4426d71d64776792451cc2a8bdbdb2
- SSDEEP 3072:09Il/GCUwTl8n55px88N8ZgJLk0BnPhdzua9Dnt0Fz4I+scPtqwI/mDon1PbWkSg:ll1wgM7t0FhLdwI/bn1PikSNZuP
- TLSH
  T16D543B4C13FCC715D6FF77B2E8308A954AB6FA47A866E39D470CA5F82953742A840723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Synapse x Launcher/FirebaseAdmin.xml
- Size 307KB
- SHA256 8221334989c66b85a78f04bf43bdfe250e235e0354e7349532f70c735810ae81
- MD5 120bcb91cd22fce214d298bf36c732c8
- SHA1 26d4dfc666f7dd111c089d0a0e9072a18882cdd1
- SHA512 800b28e0c72eb525cdc9a81ebe89cd1f67f4eb78ed359221ea547993f86023c5cb03305a3d93065fe635ea8c562e2d2f84b8d9897883fd54a3fb9e370f6c8c85
- SSDEEP 6144:iYs+zFNDXVS5MbMu81ZdsEfuDIfe6/VCV64NcYVnXY8eFG7Thk1fWn1l5SYpXgJ0:ZFFGjqr
- TLSH
  T19464651663E1FB91088374929C55B4C8BE2D0C33252A5419F0DDAF796F8AEF366BB1D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  Synapse x Launcher/Google.Api.Gax.Rest.dll
- Size 26KB
- SHA256 4d1605674e5ba64f35ed0f9b71206699a259f36afb4c8dc60d83246d5eeaae11
- MD5 7e9ae5af121d7b35974c2e2064cc913e
- SHA1 f0ef08e7830b6d493e03cfeec4c120d058c182a4
- SHA512 c61426ae70dc1d30234e667a7ccd5b83a0cea238ed9dbf24c37bfad85416de393c4fc2c9682309bcb56fa449166d9203a117926ea6c2bfb0201ae61c7e4e145a
- SSDEEP 768:ScnTe0cpfULtfzJMAYTExEaHkWxy///4au0jCcWEjU0R74mR5e:TTe0+UzJMAYTExRHkWcQT0jCcWEjU0RE
- TLSH
  T1B4C2190E63DCB733DABF9B3FFD7211000570D746A843E69D68CD62A62C92B412E647A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery persistence
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral11 behavioral12
- Target
  Synapse x Launcher/Google.Api.Gax.Rest.pdb
- Size 7KB
- SHA256 171e31d099ffb4bdbd357ba36e1bc763e3fd5850499f5b731532e747a4ac69ea
- MD5 e5346343e59ab5142de223bf5bc935ae
- SHA1 ebdc0835da65fdd93a7b01d8f057580489c976c9
- SHA512 a7263251024e5cbf6932a637f71b44b1d90b81bc7b37fa47eb1cf15bdd1db360d76e743df6f3d459a853ad8f8d35d2d92e9301483c6a64270f210beaa8528f3e
- SSDEEP 192:NTRdiOZ0bQMZ+FMCr+qJv8lhsqX75jiTUlc4WU/GcYz:NtgM1BKEJvetL5jiTUlc4HQz
- TLSH
  T15DF1F917B3808229C28B51BDB81343685734C201DFC55F72A2D8B576BC8AB890FF929C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  Synapse x Launcher/Google.Api.Gax.pdb
- Size 27KB
- SHA256 8331a0277bf4a64d2a0b1f5921cf601f51c03e19b0a1d9ca194fd3f66acd8dc1
- MD5 7059bad740615e7f26e3d1c6051d48ad
- SHA1 aba88ddcf9b8fd8be8d36056ed75598966ac68e0
- SHA512 62e9feea69bfc0dc5eb7961b42e46afba214cd204d28be1086a07388188573d2017ff6ec1dcc645d28476344c3446941b546d060751bd4f11888fdc15d2b16e2
- SSDEEP 768:jqZ5qmi3w/E4I/XLctzPX4OAAVRL8Q46Jo8YPl:jP4hIDmjX4OASRGm1Y9
- TLSH
  T1A9C2182F63D85339C40E14B78573834657B0D208A54A8F2B76E8B7B5ACA67291F9337C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  Synapse x Launcher/Google.Api.Gax.xml
- Size 170KB
- SHA256 80eacfbabcff5c889baa8ed76f6863508b7c227a7d5d48913b21776c6cbc9c0d
- MD5 2999396d1577549753d990ad18d26e5e
- SHA1 c6559f065b1f4033f3883fa6bc172db405c5d5e5
- SHA512 22c7b028a91788d41a4c61e69801a72d1fa75f8d4ae03a56858a1d8f6b4bd7b5a93cc7d05ef2e053e9089892c8fe9f770e81050739e8a6ee34b133dcc150de4a
- SSDEEP 3072:kZJ5izBibztIFOx0bmZP/PDbwJC+HoSXgKAw7T0yJwn6nMP6N6TYu2FLXLogEL1g:3duBTXrJ23EnEmauFoz3jbX/ltwvCq6P
- TLSH
  T15704FF1377C54A3209B2015B6D54F580FE298627A2AD2819F4CD6D233FB6C97A3BFD12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  Synapse x Launcher/Google.Apis.Auth.dll
- Size 238KB
- SHA256 68ed0cb16d06a934538961498b3b3c65bd31032becc8bab531252b9e91aff858
- MD5 996682e6df62fb44229117ac97fa8c2b
- SHA1 65343503242f64e21e7506c87dcb5945f291c8de
- SHA512 55228dc593222d035773aaf4d12763a32edf6edc1853dd9bf9f401ef2e36f471414c2118e083b277ee911593e73207926c33a54023fbc6a8050a0e2233f52cd2
- SSDEEP 3072:S+bhEe82zzLeOpzxNQHUFqcZf5gBOHPReaSSgPMvJ4sTjCqgBW5jim5h+q8d11n5:REY5hgBOPgg6jzBQ2qSJZr3
- TLSH
  T1EF34199163F84B21F6EF677AF4704215C6B6F506FC69D7ED1A8891FF2422B819840B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Synapse x Launcher/Google.Apis.Core.dll
- Size 84KB
- SHA256 28a8a62b89fada9da6ac706d151a1f5f51a9a1abc5eae47dfc4cda6b698d7cfd
- MD5 d49d1fce680730b2657b38f7b3e44f91
- SHA1 1bf54989145b2bba8a82aed24e28f7739f567a40
- SHA512 c49941b19973301c874c09c981ea099d12f7fb1c6f5c6fcbe7150a99e201aa3ce1c783b836c43dcd3c979281fc11736116c7d626ca22d4945d138ed3ce6a35b5
- SSDEEP 1536:siju2eQbjXZTRe/cGUCCCCCCYCCUutMrZ5ciUaYjKVh/xE:sijpbjXNuTKrHciUaYjKVhi
- TLSH
  T1D2834A1563EC4B57DBFF6AB8B07041250372FA6B7522E79F498CA1CE5C92F8189107A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Synapse x Launcher/Google.Apis.Core.pdb
- Size 28KB
- SHA256 2709909e1bf78c794eeef448bc708eb11f1b16df8b3114d5fb9bbb7052c15b9c
- MD5 7025498248bdb55f42f70cf595b8f328
- SHA1 2c87df1c04297a623648f89ffaaffb8d275a2eba
- SHA512 f93b8c48eee4578629d73772d864d0d2a3fa039489fc752980166a04615f6a5232f5359f11d8b39b15ab63d5236a809ad1c1beb6206daab17a8c5a5030842a3b
- SSDEEP 384:AVBVSUKmRjqy511DbWYesKgOYbBkwS0e57tX4r0p69cWKxOYK32TOk0lg:wEaReS11DbWteO4k7z5yK4V3j/2
- TLSH
  T135D23A2BA3C50B6BC6A551F7456B86201334C340DE685F13B5A873B9D899B180FDB7BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  Synapse x Launcher/Google.Apis.Core.xml
- Size 119KB
- SHA256 649c493a2d473d1d88316e18a91307119c3bf0f861cf645041c6128175ac5ca3
- MD5 ec4eb0095119c1274bb509e40890b1a0
- SHA1 33fb953b42be499c761a2390ea4529b2acf426e8
- SHA512 e708bae1c5631ddb5695c26d05e891428cb0f47d31d293c58f761318b1fdebaffe7d22b1cec2a450e92793d03b2465ba280edd7723989d347104c2cc364bfe15
- SSDEEP 3072:ONKhn0SsvlMdfhaJKN0CDYIWTi85sykvmLlNQdcred52Vmn:ONKhn0SstMnJN0CDYIWTi85sykvmLlNC
- TLSH
  T1EDC3CB07B7CC9A224C7281D2AD24B4C0FE348A63515E687974CD6E674FB7C9293EFA50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  Synapse x Launcher/Google.Apis.dll
- Size 82KB
- SHA256 457bb9217d5345c2d84c16037e2ce27a9ff07199311c94d43c965af718808148
- MD5 8eb52ab85c5c04deddda2408073b911e
- SHA1 198bec02c9b3b9ac663df2c2712478cb3297f4de
- SHA512 bca24e02b19529e76c386e69fbfec0b2b0ca77ed28906faf4a7f1e61e0d8583793872a5d030416a92e326132d87e3e5b3752067de6ea999cb7cdca46fa0da6a3
- SSDEEP 1536:6YLQaKiovFXDeY14c5kE/PBKG24t44qlWZ+poi/v70uPPxWkPrCjz:6cdKFtXp7k1G2Q44q8F2v7rPokM
- TLSH
  T1A4833B2223EC8B33DABFAB7DB43452610776E606F416F79E5D8C54ED28E278059413A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Synapse x Launcher/LiteDB.dll
- Size 478KB
- SHA256 9d93182465bd4dd44352ef25feeecfb6e821e0101fbd9b628fd0fad47978dabd
- MD5 b471e3907faa9b8200e307468c03d1b8
- SHA1 bb41cf545121a1077d29af298bbdc07231e9a5c1
- SHA512 21123331e181cf3de1c351036d48818fabceaa051857d66130118389e3bd0c6f0881583b649aa2db48230f5a654bc205194784d8765eb21da84a601374b75721
- SSDEEP 6144:AXv781Hpx+GfCdLr/jd9yyeEAHweiPofdyz7qd352SW8CdykAfq:U76BfC5avfdyvc2S
- TLSH
  T1E4A45B0263FC5226E8BF9B7098B8192087FAF815A9A5EB0F254971DD1CB3781DE41737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Synapse x Launcher/LiteDB.xml
- Size 327KB
- SHA256 6048958ca6456b0dcd56a3a7d8e3ad7dc555e2b8b4dea1194a841218aeccdd35
- MD5 a44c5a5997ebb837be5044700017244f
- SHA1 90c2d7de5dd481b0dab6ec3a369cb6a6650c9145
- SHA512 c9acf6e93f18abb77ca79aa01a9ae66f0fa4fce0533cd89ea5197db28b9bb747f5eadb3cb71b9b8a0c8ed9f48e2999671f4985a0de3f6acc7120267e6af30582
- SSDEEP 3072:/4On/KJEXEjladBhO5/oqfScLdMyDakouhm7szQJRuH0X+snhVpwrtx6E52RgWhs:IVDLmhzna
- TLSH
  T15D649AA8BEC4AD114C3641177A74F8C8FF664C23D11A692B30AD2E635F728C776AF524
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32