kinsing | d8d1fd42f99a1fe1622bbc19d36bf59eff5f06eed6033a53c2640b71bc74a350 | Triage

Sharing

General

Target

75198acf24bd3666da2e237a607989e9
Size

196KB
Sample

240125-v3g6tabfh4
MD5

75198acf24bd3666da2e237a607989e9
SHA1

cccd75a3cd8616b3dd16964b8536942b67010611
SHA256

d8d1fd42f99a1fe1622bbc19d36bf59eff5f06eed6033a53c2640b71bc74a350
SHA512

5583a37cce860b789a25f75a4c90ae53e567f8b264bd74002bf333bee16083c6e42ac8d38047a935e6b4c16c4bf1af2414ea9909fdc3c71d2122f9d812b890fd
SSDEEP

3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/e8FpS:o68i3odBiTl2+TCU/4

Score

10^/10

kinsing loader persistence

Malware Config

Targets

- Target
  
  75198acf24bd3666da2e237a607989e9
- Size
  
  196KB
- MD5
  
  75198acf24bd3666da2e237a607989e9
- SHA1
  
  cccd75a3cd8616b3dd16964b8536942b67010611
- SHA256
  
  d8d1fd42f99a1fe1622bbc19d36bf59eff5f06eed6033a53c2640b71bc74a350
- SHA512
  
  5583a37cce860b789a25f75a4c90ae53e567f8b264bd74002bf333bee16083c6e42ac8d38047a935e6b4c16c4bf1af2414ea9909fdc3c71d2122f9d812b890fd
- SSDEEP
  
  3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/e8FpS:o68i3odBiTl2+TCU/4
Score

10^/10

persistence kinsing loader
- Kinsing
  Kinsing is a loader written in Golang.
  loader kinsing
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

kinsingloaderpersistence