kinsing | 286f628f7fb861002e747bc4fa5c03960596524b5bc7c5dcff2c1f0ddf93a86d

Analysis

max time kernel
139s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-01-2024 16:14

Target

74f1f1dc823301b381fdd0fe39136543.exe
Size

184KB
MD5

74f1f1dc823301b381fdd0fe39136543
SHA1

231dcb19d1666163060c43b28630b61a0b49b32a
SHA256

286f628f7fb861002e747bc4fa5c03960596524b5bc7c5dcff2c1f0ddf93a86d
SHA512

ab43662ae5a29221912ef2751c4c3b1070fd80b2dc74dc4377ebb29e2c608e0d5d14cd28b32c29f44102749778b2b408a05df23e8479efa09c7c77b2f0f235ae
SSDEEP

3072:ruRroT0xcOAEAmj3Mh2Oc8AMEXYMTxXldk7xKDP7VylPvpFv:ruhoxDEAIMYOc8M1BlylPvpF

Score

10^/10

kinsing loader

Kinsing
Kinsing is a loader written in Golang.
loader kinsing
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1348 4536 WerFault.exe 74f1f1dc823301b381fdd0fe39136543.exe

pid	pid_target	process	target process
1348	4536	WerFault.exe	74f1f1dc823301b381fdd0fe39136543.exe

C:\Users\Admin\AppData\Local\Temp\74f1f1dc823301b381fdd0fe39136543.exe
"C:\Users\Admin\AppData\Local\Temp\74f1f1dc823301b381fdd0fe39136543.exe"
1⤵
PID:4536

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4536 -s 160
2⤵
- Program crash
PID:1348

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4536 -ip 4536
1⤵
PID:3124