Overview

overview

10

Static

static

3

c4d1cae08a...b4.exe

windows7-x64

7

c4d1cae08a...b4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c4d1cae08afdbeb0430693842de3276f89ff58f1aaee887e331d7f5a3869e8b4

  • Size

    1.9MB

  • Sample

    240125-s3pvjsaggn

  • MD5

    7b616afd3de0063e5a7d4c2732f19cec

  • SHA1

    bd5068392df61b956fdb10fa4711aa8c86439ff1

  • SHA256

    c4d1cae08afdbeb0430693842de3276f89ff58f1aaee887e331d7f5a3869e8b4

  • SHA512

    3415dcb5a9446d9030e72ed8b2ad173672dae93d7373cf79b056a0a89776bdb65670aafa5bf66ee2f2f1734cd3d4f6ab53e8acb26141abb0714eab21e65f1cd8

  • SSDEEP

    49152:KKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+LjUUSCfmzz9YVgY:KKjKWQckVgtev5mnlNLpSC+zzKi

Score
10/10
kinsingloaderspywarestealer

Malware Config

Targets

    • Target

      c4d1cae08afdbeb0430693842de3276f89ff58f1aaee887e331d7f5a3869e8b4

    • Size

      1.9MB

    • MD5

      7b616afd3de0063e5a7d4c2732f19cec

    • SHA1

      bd5068392df61b956fdb10fa4711aa8c86439ff1

    • SHA256

      c4d1cae08afdbeb0430693842de3276f89ff58f1aaee887e331d7f5a3869e8b4

    • SHA512

      3415dcb5a9446d9030e72ed8b2ad173672dae93d7373cf79b056a0a89776bdb65670aafa5bf66ee2f2f1734cd3d4f6ab53e8acb26141abb0714eab21e65f1cd8

    • SSDEEP

      49152:KKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+LjUUSCfmzz9YVgY:KKjKWQckVgtev5mnlNLpSC+zzKi

    Score
    10/10
    spywarestealerkinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks