Overview

overview

10

Static

static

1

74eb5cc368...f9.exe

windows7-x64

6

74eb5cc368...f9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74eb5cc3681d8e08d4afbe092a2bd4f9

  • Size

    223KB

  • Sample

    240125-tf93msabh7

  • MD5

    74eb5cc3681d8e08d4afbe092a2bd4f9

  • SHA1

    28edc4009972cbb4f988ea98787fae328e496225

  • SHA256

    14eb266ab7200c1717e958153120d67a1111e573f80f52809157bb291fed40a6

  • SHA512

    b42a637bd9dcbf8f2a17c854c97c2471b2f88ab30fff606b02dd7c1153fee407b5e9f58903c82c6ba9afb08aeb4636b6afd09a9315a0f50879c2f35c18b4d747

  • SSDEEP

    3072:+H4KWlzjZkAsU6iOTQdzktLyQWSzwbDu8dSaH/1:+HSlPLs6tzkLgbDu8caH9

Score
10/10
kinsingdiscoveryloader

Malware Config

Targets

    • Target

      74eb5cc3681d8e08d4afbe092a2bd4f9

    • Size

      223KB

    • MD5

      74eb5cc3681d8e08d4afbe092a2bd4f9

    • SHA1

      28edc4009972cbb4f988ea98787fae328e496225

    • SHA256

      14eb266ab7200c1717e958153120d67a1111e573f80f52809157bb291fed40a6

    • SHA512

      b42a637bd9dcbf8f2a17c854c97c2471b2f88ab30fff606b02dd7c1153fee407b5e9f58903c82c6ba9afb08aeb4636b6afd09a9315a0f50879c2f35c18b4d747

    • SSDEEP

      3072:+H4KWlzjZkAsU6iOTQdzktLyQWSzwbDu8dSaH/1:+HSlPLs6tzkLgbDu8caH9

    Score
    10/10
    discoverykinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks