Overview

overview

10

Static

static

7

74f1f54184...fa.exe

windows7-x64

7

74f1f54184...fa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74f1f541846a3c6ee32f4d699a492afa

  • Size

    3.9MB

  • Sample

    240125-tpxtnsadf7

  • MD5

    74f1f541846a3c6ee32f4d699a492afa

  • SHA1

    183ea1fbb0641511ba809aef6e87479ecd3cd1dc

  • SHA256

    34a4df5b60eb669abaf9f5540ead9495234dd169579d087db8acc5ecc5d9788e

  • SHA512

    9e5bf59b2b138ed04a1b6fc2c24687636850ec72e1d7cdf44ebdf73c99f7e5f3be7f0f4ac7ec189a5e900d3e6753ac1afbbed5ec537ede55a0f874e136e765ba

  • SSDEEP

    98304:1fSNTVGA9zyULG+GFbRsSJ4J/izA9zyULG+0A7nAGxlkfzA9zyULG+GFbRsSJ4JN:tSNTZzLqjFRsSmJHzLqpbofzLqjFRsSr

Score
10/10
kinsingloaderupx

Malware Config

Targets

    • Target

      74f1f541846a3c6ee32f4d699a492afa

    • Size

      3.9MB

    • MD5

      74f1f541846a3c6ee32f4d699a492afa

    • SHA1

      183ea1fbb0641511ba809aef6e87479ecd3cd1dc

    • SHA256

      34a4df5b60eb669abaf9f5540ead9495234dd169579d087db8acc5ecc5d9788e

    • SHA512

      9e5bf59b2b138ed04a1b6fc2c24687636850ec72e1d7cdf44ebdf73c99f7e5f3be7f0f4ac7ec189a5e900d3e6753ac1afbbed5ec537ede55a0f874e136e765ba

    • SSDEEP

      98304:1fSNTVGA9zyULG+GFbRsSJ4J/izA9zyULG+0A7nAGxlkfzA9zyULG+GFbRsSJ4JN:tSNTZzLqjFRsSmJHzLqpbofzLqjFRsSr

    Score
    10/10
    upxkinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks