Overview

overview

10

Static

static

10

2024-01-25...ye.exe

windows7-x64

9

2024-01-25...ye.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_add0c32186c6990912bc0fe959b309cd_goldeneye

  • Size

    180KB

  • Sample

    240125-v5ztmscfgn

  • MD5

    add0c32186c6990912bc0fe959b309cd

  • SHA1

    54b5d13a34914aefeee12ad82ff03a4042c384cb

  • SHA256

    d26080a461a5eb56caf12e0974071d9e8615dd18b8f66f8851ca0de7f5ebb995

  • SHA512

    80ded41670d213d6f6e79127027910faff01463f513ebda22336db7d2d6bdf4c72abea6395f2ba9c5b0bd1e89e13f0ad72d94ad82c6cd65f8d596825205491aa

  • SSDEEP

    3072:jEGh0oLlfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEGpl5eKcAEc

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      2024-01-25_add0c32186c6990912bc0fe959b309cd_goldeneye

    • Size

      180KB

    • MD5

      add0c32186c6990912bc0fe959b309cd

    • SHA1

      54b5d13a34914aefeee12ad82ff03a4042c384cb

    • SHA256

      d26080a461a5eb56caf12e0974071d9e8615dd18b8f66f8851ca0de7f5ebb995

    • SHA512

      80ded41670d213d6f6e79127027910faff01463f513ebda22336db7d2d6bdf4c72abea6395f2ba9c5b0bd1e89e13f0ad72d94ad82c6cd65f8d596825205491aa

    • SSDEEP

      3072:jEGh0oLlfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEGpl5eKcAEc

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Auto-generated rule

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks