Analysis
-
max time kernel
116s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25-01-2024 17:27
General
-
Target
bind_8152.exe
-
Size
48KB
-
MD5
3764b69cba97fc72e79b293db85805da
-
SHA1
4a90aeb55276c571880251ef37b344a2ae68e702
-
SHA256
28acf11675da22778790dc492bf9f75a6db36ca3c125b3cee47cbfb0677192a4
-
SHA512
08f3ab8ef193c2b6efa304743d8a75b4b25babc2684e0dff9323e779f6353acdaba9a42af835132e37590511067d901b13306d5645155eec29b0f9051cb10f06
-
SSDEEP
1536:fPgXwpm4RmzZwCnUF2ICqdkJI6cbHDhyb8G:fPgXLdqF2fqdkJIhnO8G
Malware Config
Signatures
-
Kinsing
Kinsing is a loader written in Golang.
-
Loads dropped DLL 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bind_8152.exe"C:\Users\Admin\AppData\Local\Temp\bind_8152.exe"1⤵
- Loads dropped DLL
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\nsr4AB7.tmp\NSISdl.dllFilesize
12KB
MD5ed1a0e9f2e43d0b9911c20830bf9c70b
SHA16dc197bea1dcf81444148fb7cf963dc5f0fdda7d
SHA256eb2aae4b1168d2cea71975ade37869988fab95346b8d4e8948dfa5b102f62f69
SHA5126fb0210958b7579656e9f793adf4a03e2d5619ac6d76ecd2ce7ad8402bfe3273db68a04e551d8e3e76b6e9fd4fc09b5a3714db1e2da61c023ed998365427bed5
-
C:\Users\Admin\AppData\Local\Temp\nsr4AB7.tmp\System.dllFilesize
10KB
MD510c44246d99a1c2e5f5e6b52b111a63d
SHA10f41da79c3e789f4ae38738e3a5d73c538f8af4f
SHA2567a24883bdbf08ce90938094b6ab6f09a842af10b18b8ae4d70da2e6b806490b8
SHA512e5b0fa27cd02a67be5eb9c63646621d3e9ccfada98659c50dee8310a58ce12e1a6a059788b85f0f440067ed7e281a0e1a526b9403993b9000f91a51bfbb50da3