bbb7311e9acf70f8a34aa5e371a48c4ce67c23a768deb87128b403dfd2eb0864

Analysis

max time kernel
102s
max time network
108s
platform
windows11-21h2_x64
resource
win11-20240214-en
resource tags

arch:x64arch:x86image:win11-20240214-enlocale:en-usos:windows11-21h2-x64system
submitted
17/02/2024, 17:29

Target

Silent Crypto Miner Builder.exe
Size

105.7MB
MD5

7139d244005b72da1f27cc353093a03f
SHA1

1c4ddc927ede2542a37c0451095e17620ed5c723
SHA256

bbb7311e9acf70f8a34aa5e371a48c4ce67c23a768deb87128b403dfd2eb0864
SHA512

31e80652e4b31c518c22e00e0185ec57813b1c8ea3aae7eb0cd79a7afa4530728e37d15b2f238c73501d02d4d489eb4630a9509b05136e0ed4a3f3469de6ceb1
SSDEEP

3145728:VYQ8EMTcwxQsU+F/uLB34Tl4A2UFW4ZXYFiH:VYQX+hybNHedoE

Score

4^/10

Drops file in Windows directory 4 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Panther\UnattendGC\setupact.log	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\setuperr.log	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\diagerr.xml	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\diagwrn.xml	UserOOBEBroker.exe

C:\Users\Admin\AppData\Local\Temp\Silent Crypto Miner Builder.exe
"C:\Users\Admin\AppData\Local\Temp\Silent Crypto Miner Builder.exe"
1⤵
PID:2636

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:4572

C:\Windows\System32\oobe\UserOOBEBroker.exe
C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
1⤵
- Drops file in Windows directory
PID:2084

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
1⤵
PID:2832

memory/2636-0-0x00007FFEE1640000-0x00007FFEE2102000-memory.dmp

Filesize
10.8MB

Download
memory/2636-1-0x00000179E35E0000-0x00000179E45E0000-memory.dmp

Filesize
16.0MB

Download
memory/2636-2-0x00000179EA440000-0x00000179EA450000-memory.dmp

Filesize
64KB

Download
memory/2636-3-0x00000179EA440000-0x00000179EA450000-memory.dmp

Filesize
64KB

Download
memory/2636-4-0x00000179F00D0000-0x00000179F0146000-memory.dmp

Filesize
472KB

Download
memory/2636-5-0x00000179EA440000-0x00000179EA450000-memory.dmp

Filesize
64KB

Download
memory/2636-6-0x00000179EEF70000-0x00000179EEF8E000-memory.dmp

Filesize
120KB

Download
memory/2636-7-0x00007FFEE1640000-0x00007FFEE2102000-memory.dmp

Filesize
10.8MB

Download
memory/2636-8-0x00000179EA440000-0x00000179EA450000-memory.dmp

Filesize
64KB

Download
memory/2636-9-0x00000179EA440000-0x00000179EA450000-memory.dmp

Filesize
64KB

Download
memory/2636-11-0x00007FFEE1640000-0x00007FFEE2102000-memory.dmp

Filesize
10.8MB

Download