kinsing | daefb35c1b373416628ed336e717f90d9522db149c293d8b9822b28350c44d8e | Triage

Analysis

max time kernel
92s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
25-01-2024 16:27

Sharing

Report Analysis Logs

General

Target

74f7c68a3cac383728cdbfd02bb1320c.exe
Size

536KB
MD5

74f7c68a3cac383728cdbfd02bb1320c
SHA1

c09e53092faa300a44aa645b3e1220dbcf6f4ec2
SHA256

daefb35c1b373416628ed336e717f90d9522db149c293d8b9822b28350c44d8e
SHA512

223613e66ffe8b4e05eb6060ff91579201ff784e43663c1bb347a02da006f0c135cff338fae4807742e7b276e7895390cca8ca7e4aac7922622e8f8e5a19bd2b
SSDEEP

12288:Bx4zQ+YNDiJAg6KyKpuzXY+LwTxZ/zmv8dJa9K:BiuDiGgFyKpuzXY+ETj5

Score

10^/10

kinsing loader

Malware Config

Signatures

Kinsing
Kinsing is a loader written in Golang.
loader kinsing
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

74f7c68a3cac383728cdbfd02bb1320c.exe

pid process

1520 74f7c68a3cac383728cdbfd02bb1320c.exe

C:\Users\Admin\AppData\Local\Temp\74f7c68a3cac383728cdbfd02bb1320c.exe
"C:\Users\Admin\AppData\Local\Temp\74f7c68a3cac383728cdbfd02bb1320c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1520-0-0x0000000002340000-0x0000000002341000-memory.dmp

Filesize
4KB

Download
memory/1520-1-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download