Overview

overview

10

Static

static

3

2024-01-25...uk.exe

windows7-x64

1

2024-01-25...uk.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_3f401b25505e5401ce574f12b90f2a21_ryuk

  • Size

    2.0MB

  • Sample

    240125-t1szvsbefl

  • MD5

    3f401b25505e5401ce574f12b90f2a21

  • SHA1

    656d4de3d8193ce176c82092e69825a17171f2f6

  • SHA256

    2804bab43c0858b2ea47c17d5ea62048af299d217be2b53133831733435483ea

  • SHA512

    d857789ceb71733a85e41bb0c3ff8f0fb8ec87e688efc39f80362beaca197cf4ef6be712722ac1976bbe7f273fa806759fe9628f89ea53650681bf6ef9f157d2

  • SSDEEP

    49152:pYwgtggJTiQuihmRbTOdI0+pFzz+/2fNR:3gamiQ7mROS0+pFtFR

Score
10/10
kinsingloaderspywarestealer

Malware Config

Targets

    • Target

      2024-01-25_3f401b25505e5401ce574f12b90f2a21_ryuk

    • Size

      2.0MB

    • MD5

      3f401b25505e5401ce574f12b90f2a21

    • SHA1

      656d4de3d8193ce176c82092e69825a17171f2f6

    • SHA256

      2804bab43c0858b2ea47c17d5ea62048af299d217be2b53133831733435483ea

    • SHA512

      d857789ceb71733a85e41bb0c3ff8f0fb8ec87e688efc39f80362beaca197cf4ef6be712722ac1976bbe7f273fa806759fe9628f89ea53650681bf6ef9f157d2

    • SSDEEP

      49152:pYwgtggJTiQuihmRbTOdI0+pFzz+/2fNR:3gamiQ7mROS0+pFtFR

    Score
    10/10
    kinsingloaderspywarestealer

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks