kinsing | 75ea2781f09f3a38c5720aad3b2fbfb8fd3c8d1039d2ccc156a5f635ed3d746d | Triage

Sharing

General

Target

751a8c76f3a18dc730c7b45f5d17fd84
Size

44KB
Sample

240125-v4dvsabgb5
MD5

751a8c76f3a18dc730c7b45f5d17fd84
SHA1

9e2146d7ddfe947c2eebd312c19b019d44170f7c
SHA256

75ea2781f09f3a38c5720aad3b2fbfb8fd3c8d1039d2ccc156a5f635ed3d746d
SHA512

ef6b2b5c89f04ae843f7e10d1dcc9562ad2d2f4fb83d9312fe6e13cf5dccb2cd2c5b2e7be971b48fb19266e9e88da06d33af3c0fe7f1a1180e40493b9d54219e
SSDEEP

768:QTD3MpL75JsgsqYSV7vLV8VqWTVcq8VQ895VZE91VqbH9FVhC9xVjF9OVakR9sVf:uD8pP5JBsqnBvv3Wf

Score

10^/10

kinsing loader persistence

Malware Config

Targets

- Target
  
  751a8c76f3a18dc730c7b45f5d17fd84
- Size
  
  44KB
- MD5
  
  751a8c76f3a18dc730c7b45f5d17fd84
- SHA1
  
  9e2146d7ddfe947c2eebd312c19b019d44170f7c
- SHA256
  
  75ea2781f09f3a38c5720aad3b2fbfb8fd3c8d1039d2ccc156a5f635ed3d746d
- SHA512
  
  ef6b2b5c89f04ae843f7e10d1dcc9562ad2d2f4fb83d9312fe6e13cf5dccb2cd2c5b2e7be971b48fb19266e9e88da06d33af3c0fe7f1a1180e40493b9d54219e
- SSDEEP
  
  768:QTD3MpL75JsgsqYSV7vLV8VqWTVcq8VQ895VZE91VqbH9FVhC9xVjF9OVakR9sVf:uD8pP5JBsqnBvv3Wf
Score

10^/10

persistence kinsing loader
- Kinsing
  Kinsing is a loader written in Golang.
  loader kinsing
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

kinsingloaderpersistence