Overview
overview
7Static
static
3OG Synthwa....0.exe
windows10-2004-x64
7OG Synthwa....0.exe
windows10-ltsc_2021-x64
7OG Synthwa....0.exe
windows11-21h2-x64
7OG Synthwa...rt.dll
windows10-2004-x64
1OG Synthwa...rt.dll
windows10-ltsc_2021-x64
1OG Synthwa...rt.dll
windows11-21h2-x64
1OG Synthwa...64.sys
windows10-2004-x64
3OG Synthwa...64.sys
windows10-ltsc_2021-x64
3OG Synthwa...64.sys
windows11-21h2-x64
3OG Synthwave/iup.dll
windows10-2004-x64
1OG Synthwave/iup.dll
windows10-ltsc_2021-x64
1OG Synthwave/iup.dll
windows11-21h2-x64
1General
- Target OG Synthwave.rar
- Size 98.6MB
- Sample260930-1k6z4syses
- SHA256 7f4a197d389246eea72c1bb29f8cf96535f213f74a272cb15e67fb1552d48c16
- MD5 35c75aa86478d292f970bc73825e740c
- SHA1 87ff268e604a4331c8a0f0a9a50458654ec9f3d6
- SHA512 4336edeaa8a521bd521770cd11a8faae6f42edba116b3f47444c865833b177ef1fe392056beec36c2cf218cff3654a097d444c54528b1ccf5bc586ea4a14dabd
- SSDEEP 1572864:cZg4z2jJpwVNsbs2zbb4DZut/p5TSOqu8rwfnbpEY1QH0kh9ErTq7fJeye:RjJnR8lut/n8ubpEY1IGru7xeN
- TLSH T16038337A3D221346B21752874A4D07F7B9271E60F7669CE6D3F49C865B2C4EE2C928C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
OG Synthwave/OG Synthwave 2.0.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
OG Synthwave/OG Synthwave 2.0.exe
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral3
Sample
OG Synthwave/OG Synthwave 2.0.exe
Resource
win11-20260911-en
Behavioral task
behavioral4
Sample
OG Synthwave/WinDivert.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral5
Sample
OG Synthwave/WinDivert.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral6
Sample
OG Synthwave/WinDivert.dll
Resource
win11-20260911-en
Behavioral task
behavioral7
Sample
OG Synthwave/WinDivert64.sys
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
OG Synthwave/WinDivert64.sys
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral9
Sample
OG Synthwave/WinDivert64.sys
Resource
win11-20260911-en
Behavioral task
behavioral10
Sample
OG Synthwave/iup.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral11
Sample
OG Synthwave/iup.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral12
Sample
OG Synthwave/iup.dll
Resource
win11-20260911-en
Malware Config
Targets
-
- Target OG Synthwave/OG Synthwave 2.0.exe
- Size 98.1MB
- SHA256 dee48103bca140695217f9916ad161934dd4e15ac5351a4f69f19894971f8a0d
- MD5 359f0c4b77f53b1d8b734d4a822516f2
- SHA1 5d4bbfe2202eb50621ea95c7468826a608dfefe9
- SHA512 020922910cea8bbf70121480041a5d44504d4e8caaf754537a62b5a114365b69637f882ac70cf0bea2dda715987afe736bc119a5d0e8e85d9093ede326864efe
- SSDEEP 3145728:otyBxstzHYmf6voT3b++7i4jCvxDlMpuuE:ogWtz4YTLli4jCGD
- TLSH T126383311AC7B54AAFA628DB903794B8A63727437079337EECF5E2E3019C4F852F15429
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target OG Synthwave/WinDivert.dll
- Size 45KB
- SHA256 6a766b1927fa84a337badbaf73d0807ec1705eeaaca6cc646c837cc2f071fee4
- MD5 d101a206bd4ec273fbd06743943cd2a3
- SHA1 36003ecfefc2de99f609371f56a8b721ec23a0d5
- SHA512 1cf03b4b739a1cb7435a88dcc4626209d600fb09c460f7eab7825f8b29ffc500687c906f4e5713b4fe0f2a125dc6debb6c858d69faf6e4c04a8d298b7cae1dca
- SSDEEP 768:jtQzGyuFD5YKRRBItP9QOe2AcsUrabratlCA6ZsiZtWTr:GBuD5YIsT+1C6zZcT
- TLSH T1CC23D883F7912577C025C174839BD3525E22BDC9A358BEDF42A9FBD51C44F82CB1A90A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target OG Synthwave/WinDivert64.sys
- Size 83KB
- SHA256 72ce39241d57117d81c2856205e05bc5bc51f92dc6aea444aacfb805ab4d4ff4
- MD5 e5e52e2863582ef9ce03b6d78cf6860f
- SHA1 7c82c5db463d99eff46df696d03f8f0fe5b1bb50
- SHA512 c21025432d0aa229da2d5e09aa57345ec495e90e824d4d7dda689e14815837803fda87a9cfbad2a9ce46e949d3451922bdf4b7d52a80a214b1d79f163ad911d4
- SSDEEP 1536:6tCSzMgFDzCjw/cGtRJjZNVf2K3JWwsLe5WXikv6+i:CMHM/cG9liK3IwsC5gBv8
- TLSH T1DF833A42A3E101C9F9A689B886B59253FE32F9C16730C7DF52A0985E4F71FD0AD78325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target OG Synthwave/iup.dll
- Size 1.3MB
- SHA256 feaa50c4b1fff2f6601cddc5beae1801a56a8c4f46949a48f72e54bb899cdc92
- MD5 dec712fb581b7c129a6a07910eff6c55
- SHA1 c155211a088bb598e0094bef063d754c45f593c3
- SHA512 ef6dd8b5dd629c1ac34b6347d4653ac4947ea2f0fc47e906bfbdd5c8c55841d5510b416060702771a2c6954acb14f0b77c6530d66392ec1ed10705f84f052cb4
- SSDEEP 24576:71XcXNtqiXSi2etSKQ68076ONCp3WWlxV:71qNtquSipSKQSgcW1
- TLSH T1E3556B6AE3E90065E46B817CC5264ADFD0F0740227F5C7CB96AD5A882F136F6267FE10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10