Analysis
-
max time kernel
93s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
25-01-2024 16:05
General
-
Target
c3fba239777b27c03354d263dd3feb243978ed0b9a0b3861cce9f24a4dfcf9e3.exe
-
Size
680KB
-
MD5
c9b3c93eaab73d21a0fe6b92ce225476
-
SHA1
a9a9a0f38ae4e68cf3449fee7840e8c6e41f73bc
-
SHA256
c3fba239777b27c03354d263dd3feb243978ed0b9a0b3861cce9f24a4dfcf9e3
-
SHA512
e9d6a45b576a579b17f1aa8e7b4c00e248ef79a0b0365ff7c4c76157675dc8d34d484323678704b2ad0252b78933191995f825f98dbfea72edcac9857f0fbe68
-
SSDEEP
12288:Q+6N3aA/A50ezfbt6RwBFFJCf74c/wY1RV/AOJkS:uoAI5dzxC6rcf71
Score
10/10
Malware Config
Signatures
-
Kinsing
Kinsing is a loader written in Golang.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c3fba239777b27c03354d263dd3feb243978ed0b9a0b3861cce9f24a4dfcf9e3.exe"C:\Users\Admin\AppData\Local\Temp\c3fba239777b27c03354d263dd3feb243978ed0b9a0b3861cce9f24a4dfcf9e3.exe"1⤵
- Suspicious use of SetWindowsHookEx