Analysis
-
max time kernel
102s -
max time network
108s -
platform
windows11-21h2_x64 -
resource
win11-20240214-en -
resource tags
arch:x64arch:x86image:win11-20240214-enlocale:en-usos:windows11-21h2-x64system -
submitted
17/02/2024, 17:29
Behavioral task
behavioral1
Sample
Silent Crypto Miner Builder.exe
Resource
win11-20240214-en
1 signatures
1800 seconds
General
-
Target
Silent Crypto Miner Builder.exe
-
Size
105.7MB
-
MD5
7139d244005b72da1f27cc353093a03f
-
SHA1
1c4ddc927ede2542a37c0451095e17620ed5c723
-
SHA256
bbb7311e9acf70f8a34aa5e371a48c4ce67c23a768deb87128b403dfd2eb0864
-
SHA512
31e80652e4b31c518c22e00e0185ec57813b1c8ea3aae7eb0cd79a7afa4530728e37d15b2f238c73501d02d4d489eb4630a9509b05136e0ed4a3f3469de6ceb1
-
SSDEEP
3145728:VYQ8EMTcwxQsU+F/uLB34Tl4A2UFW4ZXYFiH:VYQX+hybNHedoE
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 4 IoCs
description ioc Process File opened for modification C:\Windows\Panther\UnattendGC\setupact.log UserOOBEBroker.exe File opened for modification C:\Windows\Panther\UnattendGC\setuperr.log UserOOBEBroker.exe File opened for modification C:\Windows\Panther\UnattendGC\diagerr.xml UserOOBEBroker.exe File opened for modification C:\Windows\Panther\UnattendGC\diagwrn.xml UserOOBEBroker.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Silent Crypto Miner Builder.exe"C:\Users\Admin\AppData\Local\Temp\Silent Crypto Miner Builder.exe"1⤵PID:2636
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵PID:4572
-
C:\Windows\System32\oobe\UserOOBEBroker.exeC:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding1⤵
- Drops file in Windows directory
PID:2084
-
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exeC:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding1⤵PID:2832