Overview

overview

10

Static

static

3

74f00c1ea7...ea.exe

windows7-x64

7

74f00c1ea7...ea.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74f00c1ea7106568b0534c4026ebfcea

  • Size

    919KB

  • Sample

    240125-tmekbaadb4

  • MD5

    74f00c1ea7106568b0534c4026ebfcea

  • SHA1

    e248f79068f8bd37e302199a201f1919d69a69d8

  • SHA256

    acef1b5caa40f98c38929cb8aeba895455ab7dd3e6c5522776128c29ecaf991a

  • SHA512

    f643fb2295d0c8d6df78aa9d92cf30fa5d4360d3ee3a54e3baa0bf2b1c328533d221e219d99fd35cebfef2f9f1178f068b64331764a1d46ce6a914b5dd967882

  • SSDEEP

    24576:O2chXEgYJoRNNTQQ1ldiVTzqiCZ+8Pg5Bh:O2c4onl5epzqiCRPg5Bh

Score
10/10
kinsingloaderupx

Malware Config

Targets

    • Target

      74f00c1ea7106568b0534c4026ebfcea

    • Size

      919KB

    • MD5

      74f00c1ea7106568b0534c4026ebfcea

    • SHA1

      e248f79068f8bd37e302199a201f1919d69a69d8

    • SHA256

      acef1b5caa40f98c38929cb8aeba895455ab7dd3e6c5522776128c29ecaf991a

    • SHA512

      f643fb2295d0c8d6df78aa9d92cf30fa5d4360d3ee3a54e3baa0bf2b1c328533d221e219d99fd35cebfef2f9f1178f068b64331764a1d46ce6a914b5dd967882

    • SSDEEP

      24576:O2chXEgYJoRNNTQQ1ldiVTzqiCZ+8Pg5Bh:O2c4onl5epzqiCRPg5Bh

    Score
    10/10
    upxkinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks