kinsing | 4387f6b05b8e511693ac076ad0e482439f34b58d4751ffd7823652d427a7fe91 | Triage

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-01-2024 16:30

Sharing

Report Analysis Logs

General

Target

74f9350aa996f78c498ee2a154ea5156.exe
Size

12KB
MD5

74f9350aa996f78c498ee2a154ea5156
SHA1

320cfa00f82a9b7074b06d3505760062b5b59a7f
SHA256

4387f6b05b8e511693ac076ad0e482439f34b58d4751ffd7823652d427a7fe91
SHA512

8195ccd21e7e495bf0fa364920ad555051c0df21894f16a0bc98811f79aba9dfb07ae66839a7113e041d586a4bce7c86546b1b1aca03e5e9288503eb9d6553ac
SSDEEP

48:ygZRXRUeLm26m1Gb5bUkgspRrueNA/oglwR0EfK2:5RRUI6m1GbkeNT0Ei2

Score

10^/10

kinsing loader

Malware Config

Signatures

Kinsing
Kinsing is a loader written in Golang.
loader kinsing
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

74f9350aa996f78c498ee2a154ea5156.exe

pid process

2724 74f9350aa996f78c498ee2a154ea5156.exe

C:\Users\Admin\AppData\Local\Temp\74f9350aa996f78c498ee2a154ea5156.exe
"C:\Users\Admin\AppData\Local\Temp\74f9350aa996f78c498ee2a154ea5156.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...