Overview

overview

10

Static

static

3

2024-01-25...uk.exe

windows7-x64

1

2024-01-25...uk.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_1c8bafc4ad3431c5526989fd5378d7ae_ryuk

  • Size

    4.7MB

  • Sample

    240125-ty1a6abebq

  • MD5

    1c8bafc4ad3431c5526989fd5378d7ae

  • SHA1

    800cc2727e98f500879063c478bdd1eee2d6aaf8

  • SHA256

    747317e840f3986cf7285c6c6fe4f9df7f0d953b04a0e3fe96631e1df4c50192

  • SHA512

    b2748c84f56d352f5e797b83b4e7fb1b576a2c50e93499220fe8462d7be09dcf29fa51f79e0794ec60673f60277fc4bd4b0437cbd234bffc920d98eced094a30

  • SSDEEP

    49152:UiskYKH64vARJflh8zyZsSwE2bIgggkvpOXDVlmEE+Brvpihf41vJSYz8Xyx0/5:mH2bgg4KDVlBj1o3v+pFtFR

Score
10/10
kinsingloaderspywarestealer

Malware Config

Targets

    • Target

      2024-01-25_1c8bafc4ad3431c5526989fd5378d7ae_ryuk

    • Size

      4.7MB

    • MD5

      1c8bafc4ad3431c5526989fd5378d7ae

    • SHA1

      800cc2727e98f500879063c478bdd1eee2d6aaf8

    • SHA256

      747317e840f3986cf7285c6c6fe4f9df7f0d953b04a0e3fe96631e1df4c50192

    • SHA512

      b2748c84f56d352f5e797b83b4e7fb1b576a2c50e93499220fe8462d7be09dcf29fa51f79e0794ec60673f60277fc4bd4b0437cbd234bffc920d98eced094a30

    • SSDEEP

      49152:UiskYKH64vARJflh8zyZsSwE2bIgggkvpOXDVlmEE+Brvpihf41vJSYz8Xyx0/5:mH2bgg4KDVlBj1o3v+pFtFR

    Score
    10/10
    kinsingloaderspywarestealer

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks