Overview

overview

10

Static

static

7

74ff85ae44...c6.exe

windows7-x64

10

74ff85ae44...c6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74ff85ae44ab6475c8abf7a36325b6c6

  • Size

    2.3MB

  • Sample

    240125-t8cylsahd9

  • MD5

    74ff85ae44ab6475c8abf7a36325b6c6

  • SHA1

    38a271a47f3fdc2a526c5b3409963d26a4592aaa

  • SHA256

    94937da57f8e0d8bae0b95cefe7919682218ede56838ff691da2c634b2af9757

  • SHA512

    6562b89781973628ed84a177c113f6779dd18e19b2125453b4d7f1279234ce6d274909c621378997216e8384d34c5dd510cce694be5008a3ac20dffc54fed66a

  • SSDEEP

    49152:nGBgFzrU414Iu2MwjVqL8eWJ24KPQA4bVlAfsmifeaVTpN0E:nGBgj4MjjIBa2nQA4AkmRON0

Score
10/10
kinsingxmrigloaderminerupx

Malware Config

Targets

    • Target

      74ff85ae44ab6475c8abf7a36325b6c6

    • Size

      2.3MB

    • MD5

      74ff85ae44ab6475c8abf7a36325b6c6

    • SHA1

      38a271a47f3fdc2a526c5b3409963d26a4592aaa

    • SHA256

      94937da57f8e0d8bae0b95cefe7919682218ede56838ff691da2c634b2af9757

    • SHA512

      6562b89781973628ed84a177c113f6779dd18e19b2125453b4d7f1279234ce6d274909c621378997216e8384d34c5dd510cce694be5008a3ac20dffc54fed66a

    • SSDEEP

      49152:nGBgFzrU414Iu2MwjVqL8eWJ24KPQA4bVlAfsmifeaVTpN0E:nGBgj4MjjIBa2nQA4AkmRON0

    Score
    10/10
    xmrigminerupxkinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks