Overview

overview

10

Static

static

3

74ebc4f7d1...c4.exe

windows7-x64

7

74ebc4f7d1...c4.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

10

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74ebc4f7d1faa17cffe70c1c370ca3c4

  • Size

    581KB

  • Sample

    240125-tgkt5saca2

  • MD5

    74ebc4f7d1faa17cffe70c1c370ca3c4

  • SHA1

    5ba890ccfc33efb782999fcc3c85b0f9c4136c38

  • SHA256

    047590ff3dbdf24abe10eebe64133191da4f6b43a8444aa7f62b621ac4fb06b6

  • SHA512

    d8a50d139ff7b69d8f0304c54e9fb8fe894c1d9780ec3e74ef23fb33cfe3cae0941aefa8fef4ce9abe4116d062a3ea161e0d80dd0f5af9408161de17484ac3b3

  • SSDEEP

    12288:jIY4hUnM8rC6ibkVAw9gPdR0YaFYponURzneJOYLT5go9Glq:EY4hmjrebk29PdR0Kponczne4W5H

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      74ebc4f7d1faa17cffe70c1c370ca3c4

    • Size

      581KB

    • MD5

      74ebc4f7d1faa17cffe70c1c370ca3c4

    • SHA1

      5ba890ccfc33efb782999fcc3c85b0f9c4136c38

    • SHA256

      047590ff3dbdf24abe10eebe64133191da4f6b43a8444aa7f62b621ac4fb06b6

    • SHA512

      d8a50d139ff7b69d8f0304c54e9fb8fe894c1d9780ec3e74ef23fb33cfe3cae0941aefa8fef4ce9abe4116d062a3ea161e0d80dd0f5af9408161de17484ac3b3

    • SSDEEP

      12288:jIY4hUnM8rC6ibkVAw9gPdR0YaFYponURzneJOYLT5go9Glq:EY4hmjrebk29PdR0Kponczne4W5H

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/kaxgcem.dll

    • Size

      153KB

    • MD5

      64ffd6dbd03f55408fbc6640317368f0

    • SHA1

      227d86d47d53d5f62a2227e6d2b282519d38005d

    • SHA256

      b8d9b2c53ea62560b03c2ef9f139370380b4c931d1fc02172bc7e1a98e41ffc3

    • SHA512

      ba03c31e00ec24a7bd4e59088feaee3eb389b459cbd041613222f95d9ea1689920127d390d81c2e0000ccf72f67a2043cf81dd324cab3c887003aa93783501c8

    • SSDEEP

      3072:GIM31De7jBYnZRWxnXnCjTDX/+dG/QsSauQ:9M31EzyjTjIGcQ

    Score
    10/10
    kinsingloader
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    10/10
    kinsingloader
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks