kinsing | df999975739b71b9dcea15b853d9573b5e9fcb60e899b3902d9ba8c4238b3cbc

Analysis

max time kernel
142s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-01-2024 17:29

Target

75185ddb696b6ba7e7318113c8e73f5d.exe
Size

559KB
MD5

75185ddb696b6ba7e7318113c8e73f5d
SHA1

0349f80261a27286f1c0674043ca64cccdf7cdd0
SHA256

df999975739b71b9dcea15b853d9573b5e9fcb60e899b3902d9ba8c4238b3cbc
SHA512

ac84b29b427d91e0b0c06ac4affded56bb5736be37b512e4ed8e205fa300538cb2599fee9fd52bcdf9e549689b27d0d73c5f4fd20a0de6b0ab02cd6208f052f0
SSDEEP

12288:2eGDe7sTWweIQYQpCxz5KeJkkK23mtTCoLj2TGhABeXDP1PwM+st/5:28ATWwed1pOAeJkkK0oLj2TGhAB2DP15

Score

10^/10

kinsing loader

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
4648	4680	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\75185ddb696b6ba7e7318113c8e73f5d.exe
"C:\Users\Admin\AppData\Local\Temp\75185ddb696b6ba7e7318113c8e73f5d.exe"
1⤵
PID:4680
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4680 -s 276
  2⤵
  - Program crash
  PID:4648

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4680 -ip 4680
1⤵
PID:4940