Overview

overview

10

Static

static

3

7517ba9f85...b1.dll

windows7-x64

8

7517ba9f85...b1.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7517ba9f85f8e9ac85e603e51d73e9b1

  • Size

    60KB

  • Sample

    240125-v1wlesceel

  • MD5

    7517ba9f85f8e9ac85e603e51d73e9b1

  • SHA1

    2709770df7961e1d7aebd6205ac87a23f137a6e2

  • SHA256

    38fa4588c8e8d04f5c069a816f628d5f146a950e70a0b58273e2886fa48b40f8

  • SHA512

    80281235f0f3caa82daf2b8fa9d17e8265952ebc104427d168754d23181737c617c82287e38d111a09eb3678c9e7c9fed0be0aa742b62ec1e630633a3c12120d

  • SSDEEP

    768:NBZX+Nzp4mjNx4Ds4l6iE18++uWdB9GBc81f+Iw5BLJUXNPgH9nmscY:NPdc1inuWdB9r8YXPJY2BmscY

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      7517ba9f85f8e9ac85e603e51d73e9b1

    • Size

      60KB

    • MD5

      7517ba9f85f8e9ac85e603e51d73e9b1

    • SHA1

      2709770df7961e1d7aebd6205ac87a23f137a6e2

    • SHA256

      38fa4588c8e8d04f5c069a816f628d5f146a950e70a0b58273e2886fa48b40f8

    • SHA512

      80281235f0f3caa82daf2b8fa9d17e8265952ebc104427d168754d23181737c617c82287e38d111a09eb3678c9e7c9fed0be0aa742b62ec1e630633a3c12120d

    • SSDEEP

      768:NBZX+Nzp4mjNx4Ds4l6iE18++uWdB9GBc81f+Iw5BLJUXNPgH9nmscY:NPdc1inuWdB9r8YXPJY2BmscY

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Modifies AppInit DLL entries

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks