Overview

overview

10

Static

static

1

6c9b9306a6...71.exe

windows7-x64

7

6c9b9306a6...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c9b9306a622f2a3ca086217c5a1d43123b688f2895371f2a93b84fa0a906e71

  • Size

    2.6MB

  • Sample

    240125-sy682ahgf6

  • MD5

    50ab4f2c17426e3381f3637ece60062b

  • SHA1

    e576aceb51aa17457bec0aa0b34ae0643dfd9cd5

  • SHA256

    6c9b9306a622f2a3ca086217c5a1d43123b688f2895371f2a93b84fa0a906e71

  • SHA512

    64a27a0db87a1eccc5222821716911925f356ed711ec975142e7d76fca744127aeea9f368b5086415159c1563fedb9aed1894ba04e1f0c54e596d17b4434f2e2

  • SSDEEP

    49152:m8NtOFSyg/q2q1upBe3ytP4VKpHThGZ7aM0KB4JRwTckxs8sLn:m8Nt/qAoC6VKPGhB4Jd

Score
10/10
kinsingloaderupx

Malware Config

Targets

    • Target

      6c9b9306a622f2a3ca086217c5a1d43123b688f2895371f2a93b84fa0a906e71

    • Size

      2.6MB

    • MD5

      50ab4f2c17426e3381f3637ece60062b

    • SHA1

      e576aceb51aa17457bec0aa0b34ae0643dfd9cd5

    • SHA256

      6c9b9306a622f2a3ca086217c5a1d43123b688f2895371f2a93b84fa0a906e71

    • SHA512

      64a27a0db87a1eccc5222821716911925f356ed711ec975142e7d76fca744127aeea9f368b5086415159c1563fedb9aed1894ba04e1f0c54e596d17b4434f2e2

    • SSDEEP

      49152:m8NtOFSyg/q2q1upBe3ytP4VKpHThGZ7aM0KB4JRwTckxs8sLn:m8Nt/qAoC6VKPGhB4Jd

    Score
    10/10
    upxkinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks