Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    102s
  • max time network
    108s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240214-en
  • resource tags

    arch:x64arch:x86image:win11-20240214-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    17/02/2024, 17:29

General

  • Target

    Silent Crypto Miner Builder.exe

  • Size

    105.7MB

  • MD5

    7139d244005b72da1f27cc353093a03f

  • SHA1

    1c4ddc927ede2542a37c0451095e17620ed5c723

  • SHA256

    bbb7311e9acf70f8a34aa5e371a48c4ce67c23a768deb87128b403dfd2eb0864

  • SHA512

    31e80652e4b31c518c22e00e0185ec57813b1c8ea3aae7eb0cd79a7afa4530728e37d15b2f238c73501d02d4d489eb4630a9509b05136e0ed4a3f3469de6ceb1

  • SSDEEP

    3145728:VYQ8EMTcwxQsU+F/uLB34Tl4A2UFW4ZXYFiH:VYQX+hybNHedoE

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Silent Crypto Miner Builder.exe
    "C:\Users\Admin\AppData\Local\Temp\Silent Crypto Miner Builder.exe"
    1⤵
      PID:2636
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
      1⤵
        PID:4572
      • C:\Windows\System32\oobe\UserOOBEBroker.exe
        C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
        1⤵
        • Drops file in Windows directory
        PID:2084
      • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
        C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
        1⤵
          PID:2832

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2636-0-0x00007FFEE1640000-0x00007FFEE2102000-memory.dmp

          Filesize

          10.8MB

        • memory/2636-1-0x00000179E35E0000-0x00000179E45E0000-memory.dmp

          Filesize

          16.0MB

        • memory/2636-2-0x00000179EA440000-0x00000179EA450000-memory.dmp

          Filesize

          64KB

        • memory/2636-3-0x00000179EA440000-0x00000179EA450000-memory.dmp

          Filesize

          64KB

        • memory/2636-4-0x00000179F00D0000-0x00000179F0146000-memory.dmp

          Filesize

          472KB

        • memory/2636-5-0x00000179EA440000-0x00000179EA450000-memory.dmp

          Filesize

          64KB

        • memory/2636-6-0x00000179EEF70000-0x00000179EEF8E000-memory.dmp

          Filesize

          120KB

        • memory/2636-7-0x00007FFEE1640000-0x00007FFEE2102000-memory.dmp

          Filesize

          10.8MB

        • memory/2636-8-0x00000179EA440000-0x00000179EA450000-memory.dmp

          Filesize

          64KB

        • memory/2636-9-0x00000179EA440000-0x00000179EA450000-memory.dmp

          Filesize

          64KB

        • memory/2636-11-0x00007FFEE1640000-0x00007FFEE2102000-memory.dmp

          Filesize

          10.8MB