Analysis
-
max time kernel
90s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
25-01-2024 17:34
General
-
Target
751b303b3923e73425d72689f2241bdd.exe
-
Size
48KB
-
MD5
751b303b3923e73425d72689f2241bdd
-
SHA1
6cab0f37374ef05634ac4110f7382628cd5a7283
-
SHA256
3581e0be4c1e8248b9a2533eb77f00ff2aa0736499dc7cdc84679035dd4476b8
-
SHA512
9dde8567744afb7aee941b570b3dc868310101c330ca3aa7ea711d8bdadbd1fd77ad696510c3bbaabfee9e9c21438417f3fe163fb0a4d435775e22cb4189671b
-
SSDEEP
768:4puk4x0JxJ137DEJRuJI8+8V4abjEjahVV9E062JLLCEnX:yZ4x0JxfDEvuC8KabjEjahVV9E1Li
Score
10/10
Malware Config
Signatures
-
Kinsing
Kinsing is a loader written in Golang.
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\751b303b3923e73425d72689f2241bdd.exe"C:\Users\Admin\AppData\Local\Temp\751b303b3923e73425d72689f2241bdd.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx