Overview

overview

10

Static

static

1

Re_ Receip...PO.eml

windows7-x64

5

Re_ Receip...PO.eml

windows10-2004-x64

10

Re_ Receip...PO.eml

macos-10.15-amd64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Re_ Receipt-27911Pymt.PO.eml

  • Size

    25KB

  • Sample

    240125-teng9aabd6

  • MD5

    ebd34b54f56b9c9f84aaec7b7d0dd613

  • SHA1

    470134c8a0c4e9ff5c2592dfde4f617db264cd13

  • SHA256

    0902b4d86e0401e424ba7eafef87726e7206ff56169758b1a47cee08f4c51678

  • SHA512

    fc0347d3e36a30abddcb6cf4bfb3bea13366d6851ad69dec269287021893cc2a84ff4e4110695abc2ca8af8ec00f3cc8f791db8bdd6ced357347784eb5c45d92

  • SSDEEP

    768:5LZhEBU3EBL8Q+5rFA94IfLJWCwre6HnTuzGJ5:5LZhEBUUBG5rO95fLJWC2e6zF

Score
10/10
kinsingloadermacos

Malware Config

Targets

    • Target

      Re_ Receipt-27911Pymt.PO.eml

    • Size

      25KB

    • MD5

      ebd34b54f56b9c9f84aaec7b7d0dd613

    • SHA1

      470134c8a0c4e9ff5c2592dfde4f617db264cd13

    • SHA256

      0902b4d86e0401e424ba7eafef87726e7206ff56169758b1a47cee08f4c51678

    • SHA512

      fc0347d3e36a30abddcb6cf4bfb3bea13366d6851ad69dec269287021893cc2a84ff4e4110695abc2ca8af8ec00f3cc8f791db8bdd6ced357347784eb5c45d92

    • SSDEEP

      768:5LZhEBU3EBL8Q+5rFA94IfLJWCwre6HnTuzGJ5:5LZhEBUUBG5rO95fLJWC2e6zF

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Drops file in System32 directory

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks