Overview

overview

10

Static

static

3

Silent Cry...er.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Silent Crypto Miner Builder.exe

  • Size

    56.8MB

  • Sample

    230703-1h5z2abf41

  • MD5

    dcb5e65801d361ef8fb5efb9b79f0534

  • SHA1

    0195c586e891616affde2e51d994fcee8df9bbba

  • SHA256

    735b54259f82fed90763efd31cfb59d25da39ccf0e34c31c6025575109605b9a

  • SHA512

    9233b64ee9a6df806b2f6ad48505eb387ec7c765695bb91adadfc2b3b6173601db80dfeafe7b841e35d67c27bf2588e915d788f25a4e07d8f98c494fede7bb31

  • SSDEEP

    393216:z8u1qXD+Ao41+ARiG+V9s/qCbliCtKQyyh9fB5jGbA1MZlNHgX43PEtSRjf/MfRS:z2+ktih9syYlVtKFK+51E43Mkjf/IR

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      Silent Crypto Miner Builder.exe

    • Size

      56.8MB

    • MD5

      dcb5e65801d361ef8fb5efb9b79f0534

    • SHA1

      0195c586e891616affde2e51d994fcee8df9bbba

    • SHA256

      735b54259f82fed90763efd31cfb59d25da39ccf0e34c31c6025575109605b9a

    • SHA512

      9233b64ee9a6df806b2f6ad48505eb387ec7c765695bb91adadfc2b3b6173601db80dfeafe7b841e35d67c27bf2588e915d788f25a4e07d8f98c494fede7bb31

    • SSDEEP

      393216:z8u1qXD+Ao41+ARiG+V9s/qCbliCtKQyyh9fB5jGbA1MZlNHgX43PEtSRjf/MfRS:z2+ktih9syYlVtKFK+51E43Mkjf/IR

    Score
    10/10
    evasionpersistence

    • Modifies security service

      evasion

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Sets service image path in registry

      persistence

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks