kinsing | 6d711bd12d13e9e4316f034771b151505f4abf5524834ded1b735b04a09a379b | Triage

Sharing

General

Target

6d711bd12d13e9e4316f034771b151505f4abf5524834ded1b735b04a09a379b
Size

5.9MB
Sample

240125-szf38shgg4
MD5

0701151242581015a126846fd07939fc
SHA1

4b21a344cf1d8b4dfca5e1dbc6564efed9f76a09
SHA256

6d711bd12d13e9e4316f034771b151505f4abf5524834ded1b735b04a09a379b
SHA512

3655b09b6250d81b91774ef3130dca913e94c9714a854f379b717158a703ff442a11d64d6f9d2c4c3277b06f4ea199ce30d5e90c4bd11b81d73166f5e05ec721
SSDEEP

98304:3u/Qri5NiWK7uaYnzlY/PMfYHRopBHU+gzSC+zzKi:3GFAOzMPMz5gD+y

Score

10^/10

kinsing loader spyware stealer

Malware Config

Targets

- Target
  
  6d711bd12d13e9e4316f034771b151505f4abf5524834ded1b735b04a09a379b
- Size
  
  5.9MB
- MD5
  
  0701151242581015a126846fd07939fc
- SHA1
  
  4b21a344cf1d8b4dfca5e1dbc6564efed9f76a09
- SHA256
  
  6d711bd12d13e9e4316f034771b151505f4abf5524834ded1b735b04a09a379b
- SHA512
  
  3655b09b6250d81b91774ef3130dca913e94c9714a854f379b717158a703ff442a11d64d6f9d2c4c3277b06f4ea199ce30d5e90c4bd11b81d73166f5e05ec721
- SSDEEP
  
  98304:3u/Qri5NiWK7uaYnzlY/PMfYHRopBHU+gzSC+zzKi:3GFAOzMPMz5gD+y
Score

10^/10

kinsing loader spyware stealer
- Kinsing
  Kinsing is a loader written in Golang.
  loader kinsing
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

kinsingloaderspywarestealer