d508f444542b2d7ac44a6e3c9a7a144ce7601bdaa5fbfd2de4de0e41efc50e99

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
24s
platform
windows11-21h2_x64
resource
win11-20260911-de
resource tags

arch:x64arch:x86image:win11-20260911-delocale:de-deos:windows11-21h2-x64systemwindows
submitted
02/10/2026, 07:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SynInstallerV2.exe
Size 11.8MB
Sample261002-jmd9faztev
SHA256 d508f444542b2d7ac44a6e3c9a7a144ce7601bdaa5fbfd2de4de0e41efc50e99
MD5 eb7600eada6f5fd145bc30c704907de6
SHA1 39a4a41ac8145536ed4150bf588ae1c3a1195101
SHA512 7e6bf9a65897405c22be2f8827d275430d81ae19715a383d86dae7a96e23fa1d6a09ef30e4e4a18b8deb8cd510a04df5df7b4fa2463b7765f31c986924ed57c6
SSDEEP 196608:gPurUNhLfJ/SNwxaZ1FOcWujU6Gfys1hEsDCtlnf5y6OkGT1T158:wBhTJ/SNwKFO7ujU6G6ghEs2vOR8
TLSH
T1CBC6022ABFC0DE44EFE693FE1C09688BBDC2111CA75E5212E5D91D381345B28A27D7D8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 1 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
1992	SynInstallerV2.exe

C:\Users\Admin\AppData\Local\Temp\SynInstallerV2.exe
"C:\Users\Admin\AppData\Local\Temp\SynInstallerV2.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:1992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1992-0-0x0000000001180000-0x0000000001181000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads