kinsing | 6329022e9ad469b9569a01922c0394b248bcfff037cf1f0d550df90c20e37352

Analysis

max time kernel
145s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
25-01-2024 17:32

Target

751a6d88723984a06c7a9d7f0859a292.exe
Size

32KB
MD5

751a6d88723984a06c7a9d7f0859a292
SHA1

ca6ac907c550c4a3971ee3450a56a8d9001a81f2
SHA256

6329022e9ad469b9569a01922c0394b248bcfff037cf1f0d550df90c20e37352
SHA512

fa2113b71d3c51529c81d8c337dd9b048ac6d10246ab24004e78ed561bfc61e4fef3cc48ef45516b2349d001ca9d709b611dde8fb89cdff7bb5b337e7a26fdb5
SSDEEP

384:q0jQyfjTq4FFm+wPYYcmp+KpGLCcsFQecqzEFG0zDZ4/RxVH:KyX3R1KcCcsFQecqzEFGq+d

Score

10^/10

kinsing loader

Kinsing
Kinsing is a loader written in Golang.
loader kinsing
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

751a6d88723984a06c7a9d7f0859a292.exe

pid process

3300 751a6d88723984a06c7a9d7f0859a292.exe

pid	process
3300	751a6d88723984a06c7a9d7f0859a292.exe

C:\Users\Admin\AppData\Local\Temp\751a6d88723984a06c7a9d7f0859a292.exe
"C:\Users\Admin\AppData\Local\Temp\751a6d88723984a06c7a9d7f0859a292.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3300