Troubleshooting Yandex browser (Russian 18.6.1.772) containing Coinminer?

E

Evjl's Rain

Level 47
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Describe the problem
Browser containing coinminer
What have you tried?
nothing
Sort by date Sort by votes
Snickers102 said:
Have you tried using Process Explorer / Hacker to check if your CPU is getting unusually high usage from the browser? That's how coin miner works right?
Click to expand...
I don't use yandex. I was just bored and looking around and I found the info
I can't verify it
 
Upvote 0
Evjl's Rain said:
here is the link of version Russian 18.6.1.772
I noticed the hash is different from the file's hash reported in VT and hybrid-analysis
Click to expand...
That link is for 18.6.1.770.

Evjl's Rain said:
it seems legit. Not sure if this is a modified version or the official one
Click to expand...
The latest version is 18.6.1.770 made on July 7th, that 18.6.1.772 version was made on July 6th, (beta is 18.7.0.2241).
 
Upvote 0
TairikuOkami said:
That link is for 18.6.1.770.


The latest version is 18.6.1.770 made on July 7th, that 18.6.1.772 version was made on July 6th, (beta is 18.7.0.2241).
Click to expand...
the english version is 18.6.1.770
the russian version is 18.6.1.772

here is the screenshot, my link was correct. Russian version is problematic. Not sure about the english one
Capture.PNG
 
Upvote 0

Attachments

  • capture_07222018_180533.jpg
    capture_07222018_180533.jpg
    55.7 KB · Views: 683
Upvote 0
Snickers102 said:
Have you tried using Process Explorer / Hacker to check if your CPU is getting unusually high usage from the browser? That's how coin miner works right?
Click to expand...
If it would be stable release why would they allow cpu to go that high? If they wanna mine as theyre closed source they can do it with minimal hash, without people using their browser doesnt notice anything

Im using yandex dns, maybe in part of their botnet also
 
Upvote 0

Attachments

  • Capture.PNG
    Capture.PNG
    240.8 KB · Views: 671
Upvote 0
I took it for a spin, browsing pages for about 10 mins, seems clean, cpu usage is low, stays at 0.xx% when not doing anything, going to about 5-10% max when loading pages, as expected, which btw surprises me just how fast it is, it's very slightly faster than chrome, but that's probably because I have like 10 extensions on chrome and a few hundred tabs open compared to 5 tabs on yandex and no extensions, even then the speed difference is very small but noticeable, not in the sense that's there's a noticeable difference, but in the sense that I can see it, although 98% of people wouldn't notice it cuz even for me it's very subtle, but it does feel fast when you get used to the difference after a few minutes, even though at first it may seem like the same, it's like the difference between 10 and 15-20 ping in games, both are low but one is just slightly lower, 99% people wouldn't notice it

@Evjl's Rain what features does this browser have compared to chrome?
 
Upvote 0
Snickers102 said:
I took it for a spin, browsing pages for about 10 mins, seems clean, cpu usage is low, stays at 0.xx% when not doing anything, going to about 5-10% max when loading pages, as expected, which btw surprises me just how fast it is, it's very slightly faster than chrome, but that's probably because I have like 10 extensions on chrome and a few hundred tabs open compared to 5 tabs on yandex and no extensions, even then the speed difference is very small but noticeable, not in the sense that's there's a noticeable difference, but in the sense that I can see it, although 98% of people wouldn't notice it cuz even for me it's very subtle, but it does feel fast when you get used to the difference after a few minutes, even though at first it may seem like the same, it's like the difference between 10 and 15-20 ping in games, both are low but one is just slightly lower, 99% people wouldn't notice it

@Evjl's Rain what features does this browser have compared to chrome?
Click to expand...
I used it for a short period of time, then I ditched it because I couldn't sideload the extensions I want
it has banking protection, built-in DNS changer,...

I don't need most of its features
I think this browser is a lot worse than chrome in terms of privacy
I frequently send data to yandex's IPs

moreover, the URL protection is a lot worse than google safe browsing

I doubt the banking protection might compromise our banking information

EDIT: this browser is weird. when you plug your USB in, it would show a popup about something
in other words, it monitors what you are doing in your computer
 
Upvote 0
Evjl's Rain said:
I frequently send data to yandex's IPs
Click to expand...
There are many cloud features, which can be disabled, like suggestions, translate, quick answers, etc.

Evjl's Rain said:
moreover, the URL protection is a lot worse than google safe browsing
Click to expand...
You can say that again, they switched from Google to Sophos. It is a miracle, if it actually reports anything.

Evjl's Rain said:
I doubt the banking protection might compromise our banking information
Click to expand...
Protected Mode is a nice feature, it disables all extensions (except password) on bank webpages, so malicious extensions stand no chance.
 
Upvote 0
Snickers102 said:
I mean it's russian :ROFLMAO:
Click to expand...
also, I think it would trigger the coinminer when the PC is in idle or something like that
when we are actively browsing or opening task manager, we won't notice anything

just be aware of this browser
The respectable malware hunter said it contains a miner so it should have something malicious
 
Upvote 0

Recently browsing

Members who viewed this thread in the last 5 minutes

You may also like...

Back
Top