General

  • Target
    SynapseX.zip
  • Size 4.7MB
  • Sample261107-ww794aff98
  • SHA256 4bac0c82a8fcf7cf96dea8e64dfb22252e7fd1c873a7a2f35b411e79e235b545
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      SynapseX/SynapseX.exe
    • Size 8.0MB
    • SHA256 6c2446f06869a50df82165dbbc78527186cc70e8ebb50c48634de0ab9057c00a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Credentials from Password Stores: Windows Credential Manager

      Suspicious access to Credentials History.

    • Executes dropped EXE

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Target
      SynapseX/libcurl.dll
    • Size 532KB
    • SHA256 79f567797066f6206ea870ffda11cf92612aea0ee3a26582be38ddd0fd51fa53
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks