Overview

overview

10

Static

static

10

2024-01-25...ye.exe

windows7-x64

9

2024-01-25...ye.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_7c7b3edf03d7bfafbdd998980609e48a_goldeneye

  • Size

    216KB

  • Sample

    240125-v3v3nsbga4

  • MD5

    7c7b3edf03d7bfafbdd998980609e48a

  • SHA1

    1c10476bccdff2e38d9e61f764e03b8389f1219d

  • SHA256

    18a59b14d32216b8eec2064a0bed2658dc049d90376223dcd10c58697ef2e383

  • SHA512

    b2702fdd987d8bcc3cf62039b67334139357f9db2d25aab7402885b8746d8c05074e309fd06112b2795e642813dd0de6c6d887b5b2bb6bdbd1f30b93fcd0e93a

  • SSDEEP

    3072:jEGh0oXl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMUy:jEGFlEeKcAEcGy

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      2024-01-25_7c7b3edf03d7bfafbdd998980609e48a_goldeneye

    • Size

      216KB

    • MD5

      7c7b3edf03d7bfafbdd998980609e48a

    • SHA1

      1c10476bccdff2e38d9e61f764e03b8389f1219d

    • SHA256

      18a59b14d32216b8eec2064a0bed2658dc049d90376223dcd10c58697ef2e383

    • SHA512

      b2702fdd987d8bcc3cf62039b67334139357f9db2d25aab7402885b8746d8c05074e309fd06112b2795e642813dd0de6c6d887b5b2bb6bdbd1f30b93fcd0e93a

    • SSDEEP

      3072:jEGh0oXl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMUy:jEGFlEeKcAEcGy

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Auto-generated rule

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks