Overview

overview

10

Static

static

3

74f0fa32fb...b7.exe

windows7-x64

9

74f0fa32fb...b7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74f0fa32fb8ab87065e21bdfa5a710b7

  • Size

    889KB

  • Sample

    240125-tnmx3sadd5

  • MD5

    74f0fa32fb8ab87065e21bdfa5a710b7

  • SHA1

    b1c73b3ce7efcc73c86023d39bc123b1ca7bf894

  • SHA256

    0e07fe6eddfa25fbda9ab54224ebc739b5bb62fbcd2443605b15a0b870effcdd

  • SHA512

    dbc0848107feda60d1d43fe7015788fe765e13f9a9de461c26ee7b764e9bd291b8b69901415f2e5c67de985fac2004128018d8828e2b1a327eca596346556bde

  • SSDEEP

    24576:rxR9AV0O+7sgzp+8fdYqZmpMebLdiGxJ8uYAvtrKOuz62:205ytWUteOuz62

Score
10/10
kinsingcollectionevasionloader

Malware Config

Targets

    • Target

      74f0fa32fb8ab87065e21bdfa5a710b7

    • Size

      889KB

    • MD5

      74f0fa32fb8ab87065e21bdfa5a710b7

    • SHA1

      b1c73b3ce7efcc73c86023d39bc123b1ca7bf894

    • SHA256

      0e07fe6eddfa25fbda9ab54224ebc739b5bb62fbcd2443605b15a0b870effcdd

    • SHA512

      dbc0848107feda60d1d43fe7015788fe765e13f9a9de461c26ee7b764e9bd291b8b69901415f2e5c67de985fac2004128018d8828e2b1a327eca596346556bde

    • SSDEEP

      24576:rxR9AV0O+7sgzp+8fdYqZmpMebLdiGxJ8uYAvtrKOuz62:205ytWUteOuz62

    Score
    10/10
    collectionevasionkinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Nirsoft

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Accesses Microsoft Outlook accounts

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks