kinsing | a164797012daccd9d698b7733a75bb69aa246eadf674cdb039ba89c93c458e2f | Triage

Sharing

General

Target

74f19e93cf6b6e1f6c2cb4cf3c3f673e
Size

16.1MB
Sample

240125-tphdzsbcdr
MD5

74f19e93cf6b6e1f6c2cb4cf3c3f673e
SHA1

12fcec18cf0ec0b9102f5191b1cfde1990f39425
SHA256

a164797012daccd9d698b7733a75bb69aa246eadf674cdb039ba89c93c458e2f
SHA512

f241b18682e6a9e980c48f8aa45f9c2f5e1abc7564bea53eed4a7462824bad8572b85308709c343628f17ac70b28e920fa89dbae829ec4e4f2327fbecbab9377
SSDEEP

3072:WfTTo6ATWCcybRRsEkTToFEdEdEdEdEdEdEdEdEdEdEdEdEdEdEdEdEdEdEdEdEP:tWCXbQN

Score

10^/10

kinsing loader persistence

Malware Config

Targets

- Target
  
  74f19e93cf6b6e1f6c2cb4cf3c3f673e
- Size
  
  16.1MB
- MD5
  
  74f19e93cf6b6e1f6c2cb4cf3c3f673e
- SHA1
  
  12fcec18cf0ec0b9102f5191b1cfde1990f39425
- SHA256
  
  a164797012daccd9d698b7733a75bb69aa246eadf674cdb039ba89c93c458e2f
- SHA512
  
  f241b18682e6a9e980c48f8aa45f9c2f5e1abc7564bea53eed4a7462824bad8572b85308709c343628f17ac70b28e920fa89dbae829ec4e4f2327fbecbab9377
- SSDEEP
  
  3072:WfTTo6ATWCcybRRsEkTToFEdEdEdEdEdEdEdEdEdEdEdEdEdEdEdEdEdEdEdEdEP:tWCXbQN
Score

10^/10

persistence kinsing loader
- Kinsing
  Kinsing is a loader written in Golang.
  loader kinsing
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

kinsingloaderpersistence