Overview

overview

10

Static

static

3

7500abde57...f2.exe

windows7-x64

10

7500abde57...f2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7500abde570e37dfe1a450f98e6774f2

  • Size

    94KB

  • Sample

    240125-t9darsbgcp

  • MD5

    7500abde570e37dfe1a450f98e6774f2

  • SHA1

    31c3044778d2e18379af8cc03f4e3500154894c0

  • SHA256

    3a07c871cd53f42ebb9bc5136f12ebac6d68b90b6392dfec2b134f4aedb61672

  • SHA512

    a73730e1995413b6cd9614c8df0dbf680800497c88deb531e05a193fb564cd2f6a00ac46a60ecf318fb13c2b987644819159161755e37f9be1660739913dc8a1

  • SSDEEP

    768:Q6quHUzxzOOTdqqYJTScKx8UJklOquH+npqigVjfqXPXkfyUhV:Q6BJTRK1k8IpWjw0fZ/

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      7500abde570e37dfe1a450f98e6774f2

    • Size

      94KB

    • MD5

      7500abde570e37dfe1a450f98e6774f2

    • SHA1

      31c3044778d2e18379af8cc03f4e3500154894c0

    • SHA256

      3a07c871cd53f42ebb9bc5136f12ebac6d68b90b6392dfec2b134f4aedb61672

    • SHA512

      a73730e1995413b6cd9614c8df0dbf680800497c88deb531e05a193fb564cd2f6a00ac46a60ecf318fb13c2b987644819159161755e37f9be1660739913dc8a1

    • SSDEEP

      768:Q6quHUzxzOOTdqqYJTScKx8UJklOquH+npqigVjfqXPXkfyUhV:Q6BJTRK1k8IpWjw0fZ/

    Score
    10/10
    persistencekinsingloader

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks