Overview

overview

10

Static

static

10

2024-01-25...ye.exe

windows7-x64

9

2024-01-25...ye.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_c4698966a1ba8aa9b7ad3255b811e8bc_goldeneye

  • Size

    216KB

  • Sample

    240125-s9blhaahfr

  • MD5

    c4698966a1ba8aa9b7ad3255b811e8bc

  • SHA1

    6bd86d8d176e6ac4d38ee429a9738d2f026f309c

  • SHA256

    2e425a7844790159a0ba175c5ceae600bb6e2be86a39ff8e3a0df64b5108dc25

  • SHA512

    9a0bbd6646bdca3d9cffe598ef1727da3733aa2156725ee1cca225aaa3482b923cdaec7f245ed6422fb97ce6de4ac6705f76fe0595c439d476ebeba5f7b2b845

  • SSDEEP

    3072:jEGh0oWl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMUy:jEG0lEeKcAEcGy

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      2024-01-25_c4698966a1ba8aa9b7ad3255b811e8bc_goldeneye

    • Size

      216KB

    • MD5

      c4698966a1ba8aa9b7ad3255b811e8bc

    • SHA1

      6bd86d8d176e6ac4d38ee429a9738d2f026f309c

    • SHA256

      2e425a7844790159a0ba175c5ceae600bb6e2be86a39ff8e3a0df64b5108dc25

    • SHA512

      9a0bbd6646bdca3d9cffe598ef1727da3733aa2156725ee1cca225aaa3482b923cdaec7f245ed6422fb97ce6de4ac6705f76fe0595c439d476ebeba5f7b2b845

    • SSDEEP

      3072:jEGh0oWl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMUy:jEG0lEeKcAEcGy

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Auto-generated rule

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks