General

  • Target

    75003550dfe37e16c7ab4584c84320e4

  • Size

    1.5MB

  • Sample

    240125-t8yv3sbgbr

  • MD5

    75003550dfe37e16c7ab4584c84320e4

  • SHA1

    b0be403be030a7c2228fdbd7f0ffbd28f4fe1293

  • SHA256

    0463b4e565fdeeb1511beea6e9d152ec3939298c20fdef976a52c1d8b5ecdfb0

  • SHA512

    d0520c2631d12d046b3dd9e3cd7952c7df4d831e33f4020ac7ff55b4595fb4981aa67b4164e1ae48785d3bce0406441c6206ecf7af3c9595367a2c22aaf1c12f

  • SSDEEP

    24576:EJ8GxR0H59jRD1AslvIolv+j4GEddH5ZN9LAfXqSM0s++4C3rCH8aQJwEH:480R0H5X2sVNGEddH5RUfXHV+d3mHNQ1

Malware Config

Targets

    • Target

      75003550dfe37e16c7ab4584c84320e4

    • Size

      1.5MB

    • MD5

      75003550dfe37e16c7ab4584c84320e4

    • SHA1

      b0be403be030a7c2228fdbd7f0ffbd28f4fe1293

    • SHA256

      0463b4e565fdeeb1511beea6e9d152ec3939298c20fdef976a52c1d8b5ecdfb0

    • SHA512

      d0520c2631d12d046b3dd9e3cd7952c7df4d831e33f4020ac7ff55b4595fb4981aa67b4164e1ae48785d3bce0406441c6206ecf7af3c9595367a2c22aaf1c12f

    • SSDEEP

      24576:EJ8GxR0H59jRD1AslvIolv+j4GEddH5ZN9LAfXqSM0s++4C3rCH8aQJwEH:480R0H5X2sVNGEddH5RUfXHV+d3mHNQ1

    • Kinsing

      Kinsing is a loader written in Golang.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      $PLUGINSDIR/AnimGif.dll

    • Size

      9KB

    • MD5

      200b6570553d00a76de8a5a6c9587f07

    • SHA1

      08ca76a84cba8483ab34285d07909e08bdbf4a67

    • SHA256

      8fb060b77728fbe347e294d1174a732db7cf9c99b187f8f332662c87683fd0a3

    • SHA512

      01ab8aa80d7d5d3083f2e3016aab5dad29c0bbba18b225a5dde51b3bc6fa4c8c1278aec17d76bc5ee2b9ccb8532c22d79845162f752bba6ee12341b4d64304e8

    • SSDEEP

      192:gOHvLYKKad68vn0YQRbqLGWSMRH00yQTbxDdHw:bvLXKa0OqRqS1MRH00HJdH

    Score
    10/10
    • Target

      $PLUGINSDIR/BgWorker.dll

    • Size

      2KB

    • MD5

      33ec04738007e665059cf40bc0f0c22b

    • SHA1

      4196759a922e333d9b17bda5369f14c33cd5e3bc

    • SHA256

      50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be

    • SHA512

      2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef

    Score
    10/10
    • Target

      $PLUGINSDIR/ButtonEvent.dll

    • Size

      4KB

    • MD5

      55788069d3fa4e1daf80f3339fa86fe2

    • SHA1

      d64e05c1879a92d5a8f9ff2fd2f1a53e1a53ae96

    • SHA256

      d6e429a063adf637f4d19d4e2eb094d9ff27382b21a1f6dccf9284afb5ff8c7f

    • SHA512

      d3b1eec76e571b657df444c59c48cad73a58d1a10ff463ce9f3acd07acce17d589c3396ad5bdb94da585da08d422d863ffe1de11f64298329455f6d8ee320616

    • SSDEEP

      96:hrA2+5HGZFYJf9D8IjDflDCoMzncsGSmE:hE2+5mMJfJ8v1zFGSm

    Score
    10/10
    • Target

      $PLUGINSDIR/ExecDos.dll

    • Size

      5KB

    • MD5

      ebcf9f71d804abab3c2e5ce4c17dc22e

    • SHA1

      17d13084e75cbfa5fbfdd0025e9a0ee5772ae765

    • SHA256

      d387b725afbd2a6f9b44999278d21025fae55b391e45f7751b88dfb13511a993

    • SHA512

      5576396c2d885c039668d7f401eeee583eb4de39e8497c3aaec32d47f4417a522fe6786c111d50a5fba7570f50e84144ef3a8aea42677d170e79114343c3a4a1

    • SSDEEP

      48:qNpugCjmWaZ+rnHAUiP9JLw/RHFtly5vorpSpSi7+5HCAx31Oglt6Zlrz9QH96AD:r0W1nHAfPPORHnooAU3xYglt6WwE

    Score
    10/10
    • Target

      $PLUGINSDIR/IpConfig.dll

    • Size

      114KB

    • MD5

      a3ed6f7ea493b9644125d494fbf9a1e6

    • SHA1

      ebeee67fb0b5b3302c69f47c5e7fca62e1a809d8

    • SHA256

      ec0f85f8a9d6b77081ba0103f967ef6705b547bf27bcd866d77ac909d21a1e08

    • SHA512

      7099e1bc78ba5727661aa49f75523126563a5ebccdff10cabf868ce5335821118384825f037fbf1408c416c0212aa702a5974bc54d1b63c9d0bcade140f9aae1

    • SSDEEP

      1536:CPDzpyvLtmY7SeAmhPzV8+i7kRuACUxHf91MionF9JTwrLPG5zfO+lP7:UZl1e7L4ARzC3dwrLPG5zG+lP7

    Score
    10/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    10/10
    • Target

      $PLUGINSDIR/ThreadTimer.dll

    • Size

      3KB

    • MD5

      c43953f463c22e048e45b402d190e77d

    • SHA1

      b4a5e6567bed3c783af030df9418f91a7bac3040

    • SHA256

      4e2a7c511e0f2ef46ac9002e0666f058ea5a4657371f086e2e4797393ee2fbf2

    • SHA512

      18facd89f3dc55826b7aa0c02b8fdf3a1e6741850e4d9c264fb095e9da7956f6a4d331655ef00862948397d1a3f99d15243d03ef09c145a39c3b9a0c2ef4c974

    Score
    10/10
    • Target

      $PLUGINSDIR/TkInetc.dll

    • Size

      172KB

    • MD5

      8777f46e35ab035d4b526377d9a7097b

    • SHA1

      9780ff9145be4aa7a912e6dbaaf7d781316b9adb

    • SHA256

      d5bb2ebaac75a1588f00cea3d35faea0e5a3c7c319785406315cda2d4a52bb47

    • SHA512

      131d6d9de492d55dc55df396a5153119bcb1c09c723abf009d8a7ef3cc71244b51f7ac1715bf7bc23c9b94ac661c255cd7a30e97267295ce060487705395128c

    • SSDEEP

      3072:bhW2YXDpNYCy32SHyE1k7skVSiIJz6Kp+CYF:bhW2YTIJzk7skVXIg

    Score
    10/10
    • Target

      $PLUGINSDIR/TkNsweb.dll

    • Size

      59KB

    • MD5

      c6731fd774db4835a5763afd404a50eb

    • SHA1

      c6b20b36631b513ca8647d952b95469b77d2ac24

    • SHA256

      23861a8828cedc363baa54760766c01fdd9e1414073ca1148ff9a19ca818b13a

    • SHA512

      c3eca3f693f4ff6b078e0708c70156f2184708f0e07d40f3cd54dd24556ae6e010a89b9bfb777f4131f0d0ee0f87d79015e7eb8f0b2606fa156d846dd581e197

    • SSDEEP

      768:LGGFsrrp6e7co2DLJUcUw9nf/bsJVtCcdWANKDrYsWjcdvCQFEzLr+M4dk:LGdNRIrLJUBwZUvCcdgYsWjcdqQdvk

    Score
    10/10
    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      e541458cfe66ef95ffbea40eaaa07289

    • SHA1

      caec1233f841ee72004231a3027b13cdeb13274c

    • SHA256

      3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420

    • SHA512

      0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c

    • SSDEEP

      384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70

    Score
    10/10
    • Target

      $PLUGINSDIR/nsArray.dll

    • Size

      6KB

    • MD5

      f8462e9d1d7fd39789afca89ab6d6046

    • SHA1

      7e9a518e15b7490245d2bef11a73f209c8d8d59b

    • SHA256

      48941e9f5c92a33f1e60a7a844d562dd77ce736fd31b5503c980b49679dfe85e

    • SHA512

      57dee2253abd7d17d53811d5e95237f9434288518fb043645524a517786db2d8a91df86a6da732c620f12ad0e7ea30a923b8d5f3de386c65bd3ff240bc0dff69

    • SSDEEP

      96:TjGBPJ762z6gjutipI+h7jz5ozZt/aYfA7EfXxLfAZi:/ix7ibUpIS+Xa1wX2Zi

    Score
    10/10
    • Kinsing

      Kinsing is a loader written in Golang.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    10/10
    • Target

      $PLUGINSDIR/nsFILES.dll

    • Size

      179KB

    • MD5

      7f74996a4bf2ff85bcce4d9183c8c5fe

    • SHA1

      5def8ca9b766686e66d84d07398e2c6338c3fa36

    • SHA256

      a51470865754c14bdd149b2b713213e48ab51b2c3a601912813cfd6312b410cf

    • SHA512

      617c5f81505cf9400f572631c99fdd37359f15bbf7a4c71e20738c37dcced1b5506dce5371b0f791ba59a6686d61b0281b2ee4131435bfd300a051c585c2928d

    • SSDEEP

      3072:REKCOhgO1kxaAzpXXeszpNo68+AVqwb2bcHRg:REEqB08p78DVCk+

    Score
    10/10
    • Target

      $PLUGINSDIR/nsLANG.dll

    • Size

      80KB

    • MD5

      fa1763b462940d9646732678a1f91b6b

    • SHA1

      2d3651b31e97204302721d62c4432d06b82e8e85

    • SHA256

      2e20675e85d0cf4c8b12b3997e7b1351329b954ce60ace01cd363571f7b8c3ea

    • SHA512

      4b842cab31569c5e821ae729dd91b85f67e043e3628aee5fc71cd1b4caf51b062564570f1ecec2db3e9b4abd6c37583bff808bda479593f8f27464ead237f6ac

    • SSDEEP

      1536:AsB1XsZc0dE+6MHqW+OciAaPqsWjcdqdg5y2fl:Dsh68qW+m3P1qdg5y2f

    Score
    10/10
    • Target

      $PLUGINSDIR/nsURL.dll

    • Size

      109KB

    • MD5

      ee1c41db6834538ee4048ccfc45055be

    • SHA1

      efbbfc884a3193fadf542b0bef387cffc86923b7

    • SHA256

      8904eb2c575ac5509d1a19f7c14b6ab804e88c22e3c2232d45de4198cf9850aa

    • SHA512

      312c60a27ee625c9454cb8403c575bd2f9562fd1288ae84ad648018b62e455bf89928acb2508e75be8e76cd19ac1127e873b1187d06fa265ca2e624e02382ffb

    • SSDEEP

      1536:kiGoWl8XxFrDWGDtOsVMHusRD4i4cx+N4cWsWjcdOE5BzlE5d:kSWl8PrDpQsyOxU+N7OE5xls

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

discoveryspywarestealerupx
Score
7/10

behavioral2

kinsingdiscoveryloaderspywarestealerupx
Score
10/10

behavioral3

Score
3/10

behavioral4

kinsingloader
Score
10/10

behavioral5

Score
3/10

behavioral6

kinsingloader
Score
10/10

behavioral7

Score
3/10

behavioral8

kinsingloader
Score
10/10

behavioral9

Score
3/10

behavioral10

kinsingloader
Score
10/10

behavioral11

Score
3/10

behavioral12

kinsingloader
Score
10/10

behavioral13

Score
3/10

behavioral14

kinsingloader
Score
10/10

behavioral15

Score
3/10

behavioral16

kinsingloader
Score
10/10

behavioral17

Score
3/10

behavioral18

kinsingloader
Score
10/10

behavioral19

Score
3/10

behavioral20

kinsingloader
Score
10/10

behavioral21

Score
3/10

behavioral22

kinsingloader
Score
10/10

behavioral23

upx
Score
7/10

behavioral24

kinsingloaderupx
Score
10/10

behavioral25

Score
3/10

behavioral26

kinsingloader
Score
10/10

behavioral27

Score
3/10

behavioral28

kinsingloader
Score
10/10

behavioral29

Score
3/10

behavioral30

kinsingloader
Score
10/10

behavioral31

Score
3/10

behavioral32

kinsingloader
Score
10/10