Overview

overview

10

Static

static

10

2024-01-25...ye.exe

windows7-x64

9

2024-01-25...ye.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_7df4b59046fdae4fcc69bdeb2e2e8c60_goldeneye

  • Size

    408KB

  • Sample

    240125-t7mresahc5

  • MD5

    7df4b59046fdae4fcc69bdeb2e2e8c60

  • SHA1

    5abc70556eacaf2444e7b4f5bf516f05dbe2befe

  • SHA256

    2ca065cae559efd8a6299c4f445039f89c4634d3ed5ebe04b852dca766638d86

  • SHA512

    09e656cc6c180d7ba28d6394f3a90443bbcab652c89cb2dae77ea90485cdc091451f4ffb62b93b01944aaa667806947b5c259679c79bf3cbcf0c8b1e8d90d72a

  • SSDEEP

    3072:CEGh0oTl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGNldOe2MUVg3vTeKcAEciTBqr3jy

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      2024-01-25_7df4b59046fdae4fcc69bdeb2e2e8c60_goldeneye

    • Size

      408KB

    • MD5

      7df4b59046fdae4fcc69bdeb2e2e8c60

    • SHA1

      5abc70556eacaf2444e7b4f5bf516f05dbe2befe

    • SHA256

      2ca065cae559efd8a6299c4f445039f89c4634d3ed5ebe04b852dca766638d86

    • SHA512

      09e656cc6c180d7ba28d6394f3a90443bbcab652c89cb2dae77ea90485cdc091451f4ffb62b93b01944aaa667806947b5c259679c79bf3cbcf0c8b1e8d90d72a

    • SSDEEP

      3072:CEGh0oTl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGNldOe2MUVg3vTeKcAEciTBqr3jy

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Auto-generated rule

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks