Overview

overview

10

Static

static

3

windows_10...64.exe

windows7-x64

7

windows_10...64.exe

windows10-2004-x64

10

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

10

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

10

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

10

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

10

bin/acyclic.exe

windows7-x64

1

bin/acyclic.exe

windows10-2004-x64

10

bin/bcomps.exe

windows7-x64

1

bin/bcomps.exe

windows10-2004-x64

10

bin/cairo.dll

windows7-x64

1

bin/cairo.dll

windows10-2004-x64

10

bin/ccomps.exe

windows7-x64

1

bin/ccomps.exe

windows10-2004-x64

10

bin/cdt.dll

windows7-x64

1

bin/cdt.dll

windows10-2004-x64

10

bin/cgraph++.dll

windows7-x64

1

bin/cgraph++.dll

windows10-2004-x64

10

bin/cgraph.dll

windows7-x64

1

bin/cgraph.dll

windows10-2004-x64

10

bin/circo.exe

windows7-x64

1

bin/circo.exe

windows10-2004-x64

10

bin/cluster.exe

windows7-x64

1

bin/cluster.exe

windows10-2004-x64

10

bin/concrt140.dll

windows7-x64

1

bin/concrt140.dll

windows10-2004-x64

10

Resubmissions

23-02-2024 14:34

240223-rxp3paca7y 7

25-01-2024 16:04

240125-th1a8abbek 10

Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-01-2024 16:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bin/cairo.dll

  • Size

    1.4MB

  • MD5

    88bbd40e8bbe5ab910358abf1ef273c2

  • SHA1

    efa1a573001f5e97b5d03b7c8c9e93f0055a5595

  • SHA256

    0666a7f0a7c4e5a07328ec12699de10f1fb37ca0dcf48446bc63a5ca5090cd5a

  • SHA512

    5b974cb6a4775ab0e32dc99655cba557d7f2788b4d3dca2d3cfca2144015bbe825a701fe7fd0b5554e9a7ce31dacdc1fe7a47fac2fe2ec4f015b364cca6fc2f7

  • SSDEEP

    24576:flKt11sws+ccfh575V75iQtceAaL9WDgvOuqeFb4c8ZrTMS:0t1Rs+cc/75V75/HUgvRqepsT

Score
10/10
kinsingloader

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\cairo.dll,#1
    1⤵
      PID:4536

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads