Resubmissions

20-05-2024 13:08

240520-qdc4cabg47 3

25-01-2024 16:44

240125-t82a7sahf7 10

Analysis

  • max time kernel
    14s
  • max time network
    19s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-01-2024 16:44

General

  • Target

    FilterKeysSetter.exe

  • Size

    180KB

  • MD5

    f1d3764945a221d969ba6a1a00af5a8a

  • SHA1

    e1a2b330f9ce78580c7628de30ee2d8d263da2b6

  • SHA256

    1c838c8d8fff838cdb583cf76ff61c8002df9be7d617da6094175d4d78697023

  • SHA512

    dd686059d744134931c98d6374275937407b2e1cd90f6b4edcd09c71783d1fbed21e56d9efc457fc4176fe5709381e7e579d2ed8c5f8fedc22f54ebd6845e935

  • SSDEEP

    3072:Xe2aA8bN+6j/G0mAjprx85jd0PlBbahLqZbBdNl6RPEQvEPgeD:XdSZRrY6v8ulxahLqZbgPEWEP

Score
10/10

Malware Config

Signatures

  • Kinsing

    Kinsing is a loader written in Golang.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FilterKeysSetter.exe
    "C:\Users\Admin\AppData\Local\Temp\FilterKeysSetter.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads