Overview

overview

10

Static

static

10

2024-01-25...ye.exe

windows7-x64

9

2024-01-25...ye.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_ba912d46e1acfaf79d03097f09a2702c_goldeneye

  • Size

    372KB

  • Sample

    240125-v6ymzabgg6

  • MD5

    ba912d46e1acfaf79d03097f09a2702c

  • SHA1

    5498bf61a4d1dd745ffd368f4322cd1fd2484032

  • SHA256

    a0dc464d4cce80c660597babf8923ad92308d4a14fafaa54cdc7670e09dd7955

  • SHA512

    d2c2ae47d101fa2645acfe9a7e4c04fc6d05f6820971cf8f8fae396c17ba8f2345c62b7e1908bc6848601c94ab07e6ac63296a382e35dde2130855fc057b5f44

  • SSDEEP

    3072:CEGh0o1mlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEG+l/Oe2MUVg3vTeKcAEciTBqr3

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      2024-01-25_ba912d46e1acfaf79d03097f09a2702c_goldeneye

    • Size

      372KB

    • MD5

      ba912d46e1acfaf79d03097f09a2702c

    • SHA1

      5498bf61a4d1dd745ffd368f4322cd1fd2484032

    • SHA256

      a0dc464d4cce80c660597babf8923ad92308d4a14fafaa54cdc7670e09dd7955

    • SHA512

      d2c2ae47d101fa2645acfe9a7e4c04fc6d05f6820971cf8f8fae396c17ba8f2345c62b7e1908bc6848601c94ab07e6ac63296a382e35dde2130855fc057b5f44

    • SSDEEP

      3072:CEGh0o1mlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEG+l/Oe2MUVg3vTeKcAEciTBqr3

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Auto-generated rule

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks