kinsing | a90933ec054f7cbac0ef1c4fceac9ff06e7efac9754fe31703ecf4da42b0e01d | Triage

Sharing

General

Target

74fa24bd22d896e2f4b40cf8b4805268
Size

384KB
Sample

240125-t2fqxsbegl
MD5

74fa24bd22d896e2f4b40cf8b4805268
SHA1

354b7546d51eb5615ba2f42834f1fcb450ec4605
SHA256

a90933ec054f7cbac0ef1c4fceac9ff06e7efac9754fe31703ecf4da42b0e01d
SHA512

ec1d92d951a5601c4af3aea83fb28159e5ca157d3683241128acf9863551613bfcc765e5fa77b7390c21db823a1f179648d09afcf98650c5472b690d1f20f55d
SSDEEP

6144:u+idDbSIktiUTPVYxf+2zW/uAci+eI3kNr3KE8HsbUpOJ8oCR/SbgX9rgd20hMN:uZdn+Td6Wl/uAcim3Y8HsHJnME0RN

Score

10^/10

kinsing loader persistence

Malware Config

Targets

- Target
  
  74fa24bd22d896e2f4b40cf8b4805268
- Size
  
  384KB
- MD5
  
  74fa24bd22d896e2f4b40cf8b4805268
- SHA1
  
  354b7546d51eb5615ba2f42834f1fcb450ec4605
- SHA256
  
  a90933ec054f7cbac0ef1c4fceac9ff06e7efac9754fe31703ecf4da42b0e01d
- SHA512
  
  ec1d92d951a5601c4af3aea83fb28159e5ca157d3683241128acf9863551613bfcc765e5fa77b7390c21db823a1f179648d09afcf98650c5472b690d1f20f55d
- SSDEEP
  
  6144:u+idDbSIktiUTPVYxf+2zW/uAci+eI3kNr3KE8HsbUpOJ8oCR/SbgX9rgd20hMN:uZdn+Td6Wl/uAcim3Y8HsHJnME0RN
Score

10^/10

persistence kinsing loader
- Kinsing
  Kinsing is a loader written in Golang.
  loader kinsing
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

kinsingloaderpersistence