Overview

overview

10

Static

static

3

74fdc9bbf3...59.exe

windows7-x64

6

74fdc9bbf3...59.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74fdc9bbf37f889275a17e275e083e59

  • Size

    400KB

  • Sample

    240125-t6pjmabffp

  • MD5

    74fdc9bbf37f889275a17e275e083e59

  • SHA1

    99db239de57a96fa6fafc7ed92fb28edf5ea68a4

  • SHA256

    253ee9373dcb2323e52cd584044facfaa9004eec770edac83d48fde4eee89d31

  • SHA512

    4064b2a85e83ebacdaa3d4a1e3d47a02a69b03ac5df18109e1dcf35846071b93d997ed53d4cb7026f472f6442f5845ba35a4d3cfc1a763af6b035696efd12c73

  • SSDEEP

    12288:7XZPQxH6N7fn5nP7BzYKj86sfZQj6GkHHq4:7p8H6Rn5P7FYOCtFHK4

Score
10/10
kinsingbootkitloaderpersistence

Malware Config

Targets

    • Target

      74fdc9bbf37f889275a17e275e083e59

    • Size

      400KB

    • MD5

      74fdc9bbf37f889275a17e275e083e59

    • SHA1

      99db239de57a96fa6fafc7ed92fb28edf5ea68a4

    • SHA256

      253ee9373dcb2323e52cd584044facfaa9004eec770edac83d48fde4eee89d31

    • SHA512

      4064b2a85e83ebacdaa3d4a1e3d47a02a69b03ac5df18109e1dcf35846071b93d997ed53d4cb7026f472f6442f5845ba35a4d3cfc1a763af6b035696efd12c73

    • SSDEEP

      12288:7XZPQxH6N7fn5nP7BzYKj86sfZQj6GkHHq4:7p8H6Rn5P7FYOCtFHK4

    Score
    10/10
    bootkitpersistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks