General

  • Target
    OG Synthwave.rar
  • Size 98.6MB
  • Sample260930-1k6z4syses
  • SHA256 7f4a197d389246eea72c1bb29f8cf96535f213f74a272cb15e67fb1552d48c16
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      OG Synthwave/OG Synthwave 2.0.exe
    • Size 98.1MB
    • SHA256 dee48103bca140695217f9916ad161934dd4e15ac5351a4f69f19894971f8a0d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      OG Synthwave/WinDivert.dll
    • Size 45KB
    • SHA256 6a766b1927fa84a337badbaf73d0807ec1705eeaaca6cc646c837cc2f071fee4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      OG Synthwave/WinDivert64.sys
    • Size 83KB
    • SHA256 72ce39241d57117d81c2856205e05bc5bc51f92dc6aea444aacfb805ab4d4ff4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      OG Synthwave/iup.dll
    • Size 1.3MB
    • SHA256 feaa50c4b1fff2f6601cddc5beae1801a56a8c4f46949a48f72e54bb899cdc92
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks