Overview

overview

10

Static

static

10

2024-01-25...ye.exe

windows7-x64

9

2024-01-25...ye.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_4410354ecf1f12dac32e7509180cf312_goldeneye

  • Size

    372KB

  • Sample

    240125-v1bagsbfc4

  • MD5

    4410354ecf1f12dac32e7509180cf312

  • SHA1

    5633c7d48a12ca700132e5de5d4c21422584c8ef

  • SHA256

    925accd04f62c0628ccd361b8fb5aa197b3693158e7b3ac2781fb29b8b010f42

  • SHA512

    593f1e8a25a25880f829e782f46c94110ccf9f3722a5a62b77b910abc57de7f491f1b9a6e07706aa0a75904b89d46682fc5fea4c84f7ef04f7a3d68da8ea9737

  • SSDEEP

    3072:CEGh0oUmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGnl/Oe2MUVg3vTeKcAEciTBqr3

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      2024-01-25_4410354ecf1f12dac32e7509180cf312_goldeneye

    • Size

      372KB

    • MD5

      4410354ecf1f12dac32e7509180cf312

    • SHA1

      5633c7d48a12ca700132e5de5d4c21422584c8ef

    • SHA256

      925accd04f62c0628ccd361b8fb5aa197b3693158e7b3ac2781fb29b8b010f42

    • SHA512

      593f1e8a25a25880f829e782f46c94110ccf9f3722a5a62b77b910abc57de7f491f1b9a6e07706aa0a75904b89d46682fc5fea4c84f7ef04f7a3d68da8ea9737

    • SSDEEP

      3072:CEGh0oUmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGnl/Oe2MUVg3vTeKcAEciTBqr3

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Auto-generated rule

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks