General

  • Target

    171999e6566bf1ec97bf5ccaefef685702144f01cbea19defbbb3a220b14c975

  • Size

    2.8MB

  • Sample

    240125-thwb9sacc8

  • MD5

    757eda9fd0f912c95437dfc531d6bdd9

  • SHA1

    64c03db66d80a6a5c2568c2dd1709731e30a656f

  • SHA256

    171999e6566bf1ec97bf5ccaefef685702144f01cbea19defbbb3a220b14c975

  • SHA512

    ef8e1b298cf0bf24f7ad147b4398ccdd41247351b465d12ad2ebb352de18bc761e1bbf5a4793a1c1b3d9a93ee9e303b6d763fb046e0dd325a64ace9e85dbe14b

  • SSDEEP

    49152:OlN+FV7+s5TrEIwOfp21cHRrZ+te5D8K69/ZUSCfmzz9YVgY:RXxwYxrZbpSC+zzKi

Malware Config

Targets

    • Target

      171999e6566bf1ec97bf5ccaefef685702144f01cbea19defbbb3a220b14c975

    • Size

      2.8MB

    • MD5

      757eda9fd0f912c95437dfc531d6bdd9

    • SHA1

      64c03db66d80a6a5c2568c2dd1709731e30a656f

    • SHA256

      171999e6566bf1ec97bf5ccaefef685702144f01cbea19defbbb3a220b14c975

    • SHA512

      ef8e1b298cf0bf24f7ad147b4398ccdd41247351b465d12ad2ebb352de18bc761e1bbf5a4793a1c1b3d9a93ee9e303b6d763fb046e0dd325a64ace9e85dbe14b

    • SSDEEP

      49152:OlN+FV7+s5TrEIwOfp21cHRrZ+te5D8K69/ZUSCfmzz9YVgY:RXxwYxrZbpSC+zzKi

    • Kinsing

      Kinsing is a loader written in Golang.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks