General
- Target SynapseX.zip
- Size 4.7MB
- Sample261107-ww794aff98
- SHA256 4bac0c82a8fcf7cf96dea8e64dfb22252e7fd1c873a7a2f35b411e79e235b545
- MD5 9b3d2f05cfbfaff7470a929f1001afe6
- SHA1 06f6b8cb416197fc7e144bc69bc69efeaf368e08
- SHA512 a7e92d7dc43d7fb178e5acea838708dc740e8c6dab875aa81bd4a052924047810e221df63dd2a9af9c33987f2098ce5079986c270861229b25eec9385871eb1a
- SSDEEP 98304:GPS87eUXSUaqguwwys6BCEsU0OIZBiduze4TembDDDe8GX:qS+XSUHrwzs2IZBTztTemb6P
- TLSH T1E836331A9CC431C1E1EF86E592CE0B285C34BCA24EA2E69047D5D7BD7B1C578FAE7112
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
SynapseX/SynapseX.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
SynapseX/SynapseX.exe
Resource
win11ltsc2024-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral3
Sample
SynapseX/libcurl.dll
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
SynapseX/libcurl.dll
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target SynapseX/SynapseX.exe
- Size 8.0MB
- SHA256 6c2446f06869a50df82165dbbc78527186cc70e8ebb50c48634de0ab9057c00a
- MD5 53648dee77c997e3665a8c3add00eeaa
- SHA1 dfeedc4eae6c517ef1286bd041cc36de8a608f46
- SHA512 598afff16262ee75f9866a62a124407c6ef5dff8c577371ea79ea8817805be998ba6d0553497400312c1cf5c0106772696727f312bd55ac99a8c23dd6e138f65
- SSDEEP 98304:V3T2h9PPeJzgg3ty1qrMGUjEBoSMeduU8gsHZVY/YK2:VjigJMg3E1qwQFM/U8gsHCYX
- TLSH T1FC867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E75350
- MD5 SHA1 SHA512 SSDEEP TLSH
Credentials from Password Stores: Windows Credential Manager
Suspicious access to Credentials History.
Executes dropped EXE
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
Accesses cryptocurrency files/wallets, possible credential harvesting
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target SynapseX/libcurl.dll
- Size 532KB
- SHA256 79f567797066f6206ea870ffda11cf92612aea0ee3a26582be38ddd0fd51fa53
- MD5 8da7e810e0f12b16fe6087aadda7a69c
- SHA1 e76539074da170bf52a9cc06863ff8cb498c76e6
- SHA512 7d9d40e501c9128cb81af785091aaca60b8b92af57a69f1f498bd810431e3521f9431161f8c3e4061b7e0ba2c3dfc8034e66bc4c05f5e39941623b04d367775d
- SSDEEP 6144:y6NI7/hgoJrPOkFVuW6ZoiPPnk/9AAQIPGBxTShA9ZvT6QKob6LHywHFE1P+wTt4:u/ZhPxVOdk/4IPETvzhHuzE1P+wTt4
- TLSH T1B9C48CA9B7B407B9E5A7C138C5538607E6B2B4651350E7CF43A48B7A2F23BE1163B710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Windows Credential Manager
1Unsecured Credentials
2Credentials In Files
2