General

  • Target

    2024-01-25_4fa55fd404b924bfa9810aa11b49e4f9_goldeneye

  • Size

    180KB

  • Sample

    240125-v1zyvabfd9

  • MD5

    4fa55fd404b924bfa9810aa11b49e4f9

  • SHA1

    2757134d986d31c6a034a9088dede09e0ecc01ce

  • SHA256

    de0a1e45ca271da7a40a9cb75d60c1637feaf6e009ca3ed2ac0694ab0d27027b

  • SHA512

    e1631b798089725f4244447cd07ba8dbb6c99d00d6ee6ce38a12bc4e4b62ed6553936adb026e491aa8904348ac88ccc92df1f9fc0c417e1b3a675bcf7b94d271

  • SSDEEP

    3072:jEGh0oplfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEGbl5eKcAEc

Malware Config

Targets

    • Target

      2024-01-25_4fa55fd404b924bfa9810aa11b49e4f9_goldeneye

    • Size

      180KB

    • MD5

      4fa55fd404b924bfa9810aa11b49e4f9

    • SHA1

      2757134d986d31c6a034a9088dede09e0ecc01ce

    • SHA256

      de0a1e45ca271da7a40a9cb75d60c1637feaf6e009ca3ed2ac0694ab0d27027b

    • SHA512

      e1631b798089725f4244447cd07ba8dbb6c99d00d6ee6ce38a12bc4e4b62ed6553936adb026e491aa8904348ac88ccc92df1f9fc0c417e1b3a675bcf7b94d271

    • SSDEEP

      3072:jEGh0oplfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEGbl5eKcAEc

    • Kinsing

      Kinsing is a loader written in Golang.

    • Auto-generated rule

    • Modifies Installed Components in the registry

    • Deletes itself

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks