Analysis
- max time kernel
136s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
25/01/2024, 15:59
General
- Target 74cabf10446de5f4067216cb698de00c.exe
- Size 728KB
- Sample240125-te6zlaabe9
- SHA256 7c75119a845ed6e7e3415c7446882088b040a0a3c5a59447679309da6484e700
Score
10/10
Malware Config
Signatures
- Kinsing
Kinsing is a loader written in Golang.
- Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\74cabf10446de5f4067216cb698de00c.exe"C:\Users\Admin\AppData\Local\Temp\74cabf10446de5f4067216cb698de00c.exe"1⤵
- Checks BIOS information in registry
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx