Overview

overview

10

Static

static

3

861f1df97e...65.exe

windows7-x64

7

861f1df97e...65.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65

  • Size

    2.3MB

  • Sample

    240125-s3j93aaggk

  • MD5

    d8be08fab4e4ccff198edbf22d5c1c49

  • SHA1

    d7459b0dddac7966f33442ff89ec68d98f3c119d

  • SHA256

    861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65

  • SHA512

    ed6a0e3ae4c3eb7889313f015ab07c11308c6e4f39dd5ce9f3d0e03119f8462fc3872b1294d55074219c28e5008491397fd65325a74832ab6997e566b4687af6

  • SSDEEP

    49152:PHC+Rd3a1USycU+C52rwy3mCTbjjNvo8EmbP735YVYN3XmF+bmgb1+cxC:vCW1a10cU+C5OX3mEjjNvo8EmjOYNI+U

Score
10/10
kinsingloaderspywarestealer

Malware Config

Targets

    • Target

      861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65

    • Size

      2.3MB

    • MD5

      d8be08fab4e4ccff198edbf22d5c1c49

    • SHA1

      d7459b0dddac7966f33442ff89ec68d98f3c119d

    • SHA256

      861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65

    • SHA512

      ed6a0e3ae4c3eb7889313f015ab07c11308c6e4f39dd5ce9f3d0e03119f8462fc3872b1294d55074219c28e5008491397fd65325a74832ab6997e566b4687af6

    • SSDEEP

      49152:PHC+Rd3a1USycU+C52rwy3mCTbjjNvo8EmbP735YVYN3XmF+bmgb1+cxC:vCW1a10cU+C5OX3mEjjNvo8EmjOYNI+U

    Score
    10/10
    spywarestealerkinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks