General

  • Target

    74f114616b31a1a3f40369e16181c172

  • Size

    409KB

  • Sample

    240125-tnrahabccr

  • MD5

    74f114616b31a1a3f40369e16181c172

  • SHA1

    f9fffa2d49baa89312a97f136f958f5f4700d7b1

  • SHA256

    76dbba22b3b61385d1da908e973192e978b211957173cf57a5e917a95f96c573

  • SHA512

    b386322b35380d8cc64bdab0816bfca0e1eea167e4c9aef095cf0b62be5da35c112004d0bce50469c10ef3deb93d8052e0c3df0a378732e742722e0a52fa8ab7

  • SSDEEP

    12288:8TanssOPBBD7lezfwVGA4ZdEdIW6m9jW1TYc4OH0j2neEoQT7rd:KanssOPBlgzoVJ4QQm9jWdkOk2n/rd

Malware Config

Targets

    • Target

      74f114616b31a1a3f40369e16181c172

    • Size

      409KB

    • MD5

      74f114616b31a1a3f40369e16181c172

    • SHA1

      f9fffa2d49baa89312a97f136f958f5f4700d7b1

    • SHA256

      76dbba22b3b61385d1da908e973192e978b211957173cf57a5e917a95f96c573

    • SHA512

      b386322b35380d8cc64bdab0816bfca0e1eea167e4c9aef095cf0b62be5da35c112004d0bce50469c10ef3deb93d8052e0c3df0a378732e742722e0a52fa8ab7

    • SSDEEP

      12288:8TanssOPBBD7lezfwVGA4ZdEdIW6m9jW1TYc4OH0j2neEoQT7rd:KanssOPBlgzoVJ4QQm9jWdkOk2n/rd

    • Kinsing

      Kinsing is a loader written in Golang.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks