Overview

overview

10

Static

static

10

2024-01-25...ye.exe

windows7-x64

9

2024-01-25...ye.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_82a2b4cd281ab7846611643e00925108_goldeneye

  • Size

    168KB

  • Sample

    240125-v32v8abga7

  • MD5

    82a2b4cd281ab7846611643e00925108

  • SHA1

    ab2bef54ffba61ef123055730d5f9cac7c1b2138

  • SHA256

    7cbc4d6e0c01be66e067f901ea31c8fdd072721971f9ff6d020e4cacbd8e2e54

  • SHA512

    12f31160b0379c695c8eebd94b95717879a2cadecee8454a67d1b0269d671f8f758aa7ad7e329591761f8039f8ab2d407f87015d100c229d6b8b5d6e0aefd887

  • SSDEEP

    1536:1EGh0o7lq5IRVhNJ5Qef7BudMeNzVg3Ve+rrS2:1EGh0o7lqOPOe2MUVg3Ve+rX

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      2024-01-25_82a2b4cd281ab7846611643e00925108_goldeneye

    • Size

      168KB

    • MD5

      82a2b4cd281ab7846611643e00925108

    • SHA1

      ab2bef54ffba61ef123055730d5f9cac7c1b2138

    • SHA256

      7cbc4d6e0c01be66e067f901ea31c8fdd072721971f9ff6d020e4cacbd8e2e54

    • SHA512

      12f31160b0379c695c8eebd94b95717879a2cadecee8454a67d1b0269d671f8f758aa7ad7e329591761f8039f8ab2d407f87015d100c229d6b8b5d6e0aefd887

    • SSDEEP

      1536:1EGh0o7lq5IRVhNJ5Qef7BudMeNzVg3Ve+rrS2:1EGh0o7lqOPOe2MUVg3Ve+rX

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Auto-generated rule

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks