Overview

overview

10

Static

static

10

2024-01-25...ye.exe

windows7-x64

9

2024-01-25...ye.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_c38a1ee7a2fc8a8b51794c4507367763_goldeneye

  • Size

    180KB

  • Sample

    240125-v684pscgbn

  • MD5

    c38a1ee7a2fc8a8b51794c4507367763

  • SHA1

    9f7ffbb73f95484b306909a9335aa354f78ff6aa

  • SHA256

    5d9f1973f2ec098801c0e432c5452fc74da5cf7a5406e70d535c85f9b71e66a5

  • SHA512

    ad2c3c48ff14544f85384f94b4e3ab9628b610fd7794b1dbf3dff04a3fde73b603043ba08c680070a8b118c5f64a3251068233651f1b110206090b27933ff01d

  • SSDEEP

    3072:jEGh0omlfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEG4l5eKcAEc

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      2024-01-25_c38a1ee7a2fc8a8b51794c4507367763_goldeneye

    • Size

      180KB

    • MD5

      c38a1ee7a2fc8a8b51794c4507367763

    • SHA1

      9f7ffbb73f95484b306909a9335aa354f78ff6aa

    • SHA256

      5d9f1973f2ec098801c0e432c5452fc74da5cf7a5406e70d535c85f9b71e66a5

    • SHA512

      ad2c3c48ff14544f85384f94b4e3ab9628b610fd7794b1dbf3dff04a3fde73b603043ba08c680070a8b118c5f64a3251068233651f1b110206090b27933ff01d

    • SSDEEP

      3072:jEGh0omlfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEG4l5eKcAEc

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Auto-generated rule

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks