Overview

overview

10

Static

static

3

74f8f0d4d2...91.exe

windows7-x64

7

74f8f0d4d2...91.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74f8f0d4d2d17f3a63e2c95ce62aa991

  • Size

    313KB

  • Sample

    240125-tzxxesbedn

  • MD5

    74f8f0d4d2d17f3a63e2c95ce62aa991

  • SHA1

    e3a1ff16f0a67b5c534e096082b240f3a2cc24e9

  • SHA256

    7fa440918a8b62e7f7c85cf7d19cb4cfbbc706b1546e40dfe789c2c7144c5536

  • SHA512

    53d6dc61b641e729b084f83dee20d460ca985e18a1f50cf635b8c8a49bb6edf75f418809fc49a91ccedbbeec8558f3ac40dcb7c7dee1f0c9e250250d01de6a3d

  • SSDEEP

    6144:8d93ZBZMbqYgomHmXX7tiPkRcUN9eEKati3M2lht93hyBPSDpSLF89nx:8r3ZBIRAcRDN0EKatmh3hOPipSL8nx

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      74f8f0d4d2d17f3a63e2c95ce62aa991

    • Size

      313KB

    • MD5

      74f8f0d4d2d17f3a63e2c95ce62aa991

    • SHA1

      e3a1ff16f0a67b5c534e096082b240f3a2cc24e9

    • SHA256

      7fa440918a8b62e7f7c85cf7d19cb4cfbbc706b1546e40dfe789c2c7144c5536

    • SHA512

      53d6dc61b641e729b084f83dee20d460ca985e18a1f50cf635b8c8a49bb6edf75f418809fc49a91ccedbbeec8558f3ac40dcb7c7dee1f0c9e250250d01de6a3d

    • SSDEEP

      6144:8d93ZBZMbqYgomHmXX7tiPkRcUN9eEKati3M2lht93hyBPSDpSLF89nx:8r3ZBIRAcRDN0EKatmh3hOPipSL8nx

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks