Overview

overview

10

Static

static

7

751c0536f5...bb.exe

windows7-x64

7

751c0536f5...bb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    751c0536f5cbb6629293f0ec6987f6bb

  • Size

    318KB

  • Sample

    240125-v6mkpscgak

  • MD5

    751c0536f5cbb6629293f0ec6987f6bb

  • SHA1

    4c07cbe732700676412c1ee6db52feaf42668537

  • SHA256

    d89480941f209bd4ff7f561c88cdc2825eefc8073df57d7ab877f6825808e96f

  • SHA512

    9e1b6d0bc640ad99e487c815c4050250b8d102ff515942b14e0d0a294a72b8b6509eabbb79588393fec81ea5a8f4e8f55614f461080de4f46ffb54020a08511e

  • SSDEEP

    6144:pJYLGSu5ONdFirZa3HmNUIPg8Z8biZwIBBP0WmbXZ33r4z5Wbh/:cvu5OPMrZa3gPg8ZdwIBBsWmbtgch/

Score
10/10
kinsingbootkitloaderpersistenceupx

Malware Config

Targets

    • Target

      751c0536f5cbb6629293f0ec6987f6bb

    • Size

      318KB

    • MD5

      751c0536f5cbb6629293f0ec6987f6bb

    • SHA1

      4c07cbe732700676412c1ee6db52feaf42668537

    • SHA256

      d89480941f209bd4ff7f561c88cdc2825eefc8073df57d7ab877f6825808e96f

    • SHA512

      9e1b6d0bc640ad99e487c815c4050250b8d102ff515942b14e0d0a294a72b8b6509eabbb79588393fec81ea5a8f4e8f55614f461080de4f46ffb54020a08511e

    • SSDEEP

      6144:pJYLGSu5ONdFirZa3HmNUIPg8Z8biZwIBBP0WmbXZ33r4z5Wbh/:cvu5OPMrZa3gPg8ZdwIBBsWmbtgch/

    Score
    10/10
    bootkitpersistenceupxkinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks