Overview

overview

10

Static

static

10

2024-01-25...ye.exe

windows7-x64

9

2024-01-25...ye.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_a6a6c6a7a55cefd0235aad1ddff45bff_goldeneye

  • Size

    197KB

  • Sample

    240125-s7s3rsahdq

  • MD5

    a6a6c6a7a55cefd0235aad1ddff45bff

  • SHA1

    a5e8cc5603244f21808646fb0fd44aafc648d160

  • SHA256

    c7688f50d6cffe2a151e13461a876e9eb58e3e2dfee23d80e60f4925db3adfdd

  • SHA512

    e982e78a244a4600fc33003439d352e4773925925bbe5a113cf2f6bcc45bf6d45a3533a497f74b0be4848e29fcf2c2f9527f26fb5ee0604d43eda3db27cd9f35

  • SSDEEP

    3072:jEGh0oJ5l+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGplEeKcAEca

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      2024-01-25_a6a6c6a7a55cefd0235aad1ddff45bff_goldeneye

    • Size

      197KB

    • MD5

      a6a6c6a7a55cefd0235aad1ddff45bff

    • SHA1

      a5e8cc5603244f21808646fb0fd44aafc648d160

    • SHA256

      c7688f50d6cffe2a151e13461a876e9eb58e3e2dfee23d80e60f4925db3adfdd

    • SHA512

      e982e78a244a4600fc33003439d352e4773925925bbe5a113cf2f6bcc45bf6d45a3533a497f74b0be4848e29fcf2c2f9527f26fb5ee0604d43eda3db27cd9f35

    • SSDEEP

      3072:jEGh0oJ5l+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGplEeKcAEca

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Auto-generated rule

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks