Overview

overview

10

Static

static

7

730c002b00...c1.exe

windows7-x64

7

730c002b00...c1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    730c002b00490245fd71bf9b522a72c1

  • Size

    3.0MB

  • Sample

    240125-tesf7sabd7

  • MD5

    730c002b00490245fd71bf9b522a72c1

  • SHA1

    d2ec0465e632dda58baba33baaa98ec19c98c442

  • SHA256

    5abf8ed5e0a6f61ad3ca9e55e9fc36421188dc7fbdf65a5f7bf44dc40c7b4435

  • SHA512

    1e7e0a3c80de47a0f065c75b5c3406d78b565823ce8c1dd11e4d95d5a797826e87f4cdb1a28406f4392346ba548c9ce5991ed7e8fe2fae71bca0ad206638a4ff

  • SSDEEP

    49152:+IIOWJvSvy5o9ZxcakLPIXgdfHBL5WEMDBapcakLnx1Ng7Hg76gGD4cakLPIXgdM:+IIOaK65o9ZxcakTOSfx5WEMDBapcak1

Score
10/10
kinsingloaderupx

Malware Config

Targets

    • Target

      730c002b00490245fd71bf9b522a72c1

    • Size

      3.0MB

    • MD5

      730c002b00490245fd71bf9b522a72c1

    • SHA1

      d2ec0465e632dda58baba33baaa98ec19c98c442

    • SHA256

      5abf8ed5e0a6f61ad3ca9e55e9fc36421188dc7fbdf65a5f7bf44dc40c7b4435

    • SHA512

      1e7e0a3c80de47a0f065c75b5c3406d78b565823ce8c1dd11e4d95d5a797826e87f4cdb1a28406f4392346ba548c9ce5991ed7e8fe2fae71bca0ad206638a4ff

    • SSDEEP

      49152:+IIOWJvSvy5o9ZxcakLPIXgdfHBL5WEMDBapcakLnx1Ng7Hg76gGD4cakLPIXgdM:+IIOaK65o9ZxcakTOSfx5WEMDBapcak1

    Score
    10/10
    upxkinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks