kinsing | f90c0e62193b73e8c728c020170b4bf3009a771e518500bd7f308a68ef4fecc7

Analysis

max time kernel
91s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
25/01/2024, 15:33

Target
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.23237.32291.exe
Size 128KB
Sample240125-sy682aagan
SHA256 f90c0e62193b73e8c728c020170b4bf3009a771e518500bd7f308a68ef4fecc7
MD5 35001695a6091a546ad80dd9b34ad6d5
SHA1 22341169dbe0c9342b29de32486cc504c18c86fb
SHA512 55e331744498e9ca2726b105dc07b150ec1d2c03d1d7e2a4d83eb3ac78355160e72cd9e9e7bfaeeb5362a674c7f7d929521f05602477e4bcdf3babe38c49d064
SSDEEP 1536:4X0ALOINwTUV/acvvta3RRZubZYwfEHMieXY8hpwsuClOAqI5ZTJ5Ftz8YJJja:LlINka8NAuwfEHMTLZTa
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

kinsing loader

Program crash 1 IoCs

pid	pid_target	Process	procid_target
912	1792	WerFault.exe	14

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.23237.32291.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.23237.32291.exe"
1⤵
PID:1792
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1792 -s 224
  2⤵
  - Program crash
  PID:912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1792 -ip 1792
1⤵
PID:1104