Overview

overview

10

Static

static

10

PE.dll

windows7-x64

7

PE.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PE.#462cc

  • Size

    1.2MB

  • Sample

    240125-s8bj4saac4

  • MD5

    355ed7b82bc753a4e0325451108b3ac7

  • SHA1

    5fbf27267ccd8f1a4bb10a233daf8173a9f8c50e

  • SHA256

    636ee30a359c26e082c2418b22220ee358efe404db799e27d981bea2b19837bf

  • SHA512

    de153c490cefcb1347985a6a7e7a2f4e374562203e1ec15f4ed728fd106a9fb8c5d979b320949a3669546d834db83f031e54083ea6e6ba9ba3ced632f652f870

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAH1ftxmbfYQJZKaz+:7I99DEWVtQAHZmn0U

Score
10/10
fabookiekinsingloaderspywarestealer

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      PE.#462cc

    • Size

      1.2MB

    • MD5

      355ed7b82bc753a4e0325451108b3ac7

    • SHA1

      5fbf27267ccd8f1a4bb10a233daf8173a9f8c50e

    • SHA256

      636ee30a359c26e082c2418b22220ee358efe404db799e27d981bea2b19837bf

    • SHA512

      de153c490cefcb1347985a6a7e7a2f4e374562203e1ec15f4ed728fd106a9fb8c5d979b320949a3669546d834db83f031e54083ea6e6ba9ba3ced632f652f870

    • SSDEEP

      24576:3C7CI9TZDEWk1wCy0zaG9cQAH1ftxmbfYQJZKaz+:7I99DEWVtQAHZmn0U

    Score
    10/10
    spywarestealerkinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks