Analysis
-
max time kernel
143s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25-01-2024 16:00
General
-
Target
10005.exe
-
Size
2.4MB
-
MD5
ccfd40e08b9249a8bd1ccb7e5be41bd5
-
SHA1
3a7c4940b2c28b56ac8427d3c93358efc5d8fe0a
-
SHA256
5893114ba44a0393f8545703e3f15d3971a0dda9f75c9b38b5d90f15f869ce72
-
SHA512
5314958d3659381f9b6b5b4f944bc38bf44b93e50207bd59a2b7de8acb2608158245ac39dd626d509a922f59e19947f0898bbea784fc35241de31a17c99be5d3
-
SSDEEP
24576:yelo5jh+9b8SL1lAdL5+FPI3YqOcHQSFablTmVfIxquGjHneFUJfKt5ZulAptK2:rl+h+1qs0Y/BTmnuGjHnevFu/2
Score
10/10
Malware Config
Signatures
-
Kinsing
Kinsing is a loader written in Golang.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\10005.exe"C:\Users\Admin\AppData\Local\Temp\10005.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/228-0-0x00000000023F0000-0x00000000023F1000-memory.dmpFilesize
4KB
-
memory/228-1-0x0000000000400000-0x0000000000640000-memory.dmpFilesize
2.2MB
-
memory/228-3-0x00000000023F0000-0x00000000023F1000-memory.dmpFilesize
4KB