Overview

overview

10

Static

static

10

2024-01-25...ye.exe

windows7-x64

9

2024-01-25...ye.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_e9ce5a1b440fb4114446d8dee06b7782_goldeneye

  • Size

    372KB

  • Sample

    240125-v83dyacgfq

  • MD5

    e9ce5a1b440fb4114446d8dee06b7782

  • SHA1

    037c2635b615c2e552667074c4b6ca20a2c93801

  • SHA256

    c54d81d3a282103b95ab0bd828f1f44f4bdba84b31d12c6f78c08300485a18cb

  • SHA512

    b2c33d59289e9529b26c2145cc4b1466069b6b3608c7c95c7fa656674fddeb1f480c19df2f3256e1120dd6ff24c00ee98a0eec2f585c7fda228c4d46db8d9687

  • SSDEEP

    3072:CEGh0oKmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGdl/Oe2MUVg3vTeKcAEciTBqr3

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      2024-01-25_e9ce5a1b440fb4114446d8dee06b7782_goldeneye

    • Size

      372KB

    • MD5

      e9ce5a1b440fb4114446d8dee06b7782

    • SHA1

      037c2635b615c2e552667074c4b6ca20a2c93801

    • SHA256

      c54d81d3a282103b95ab0bd828f1f44f4bdba84b31d12c6f78c08300485a18cb

    • SHA512

      b2c33d59289e9529b26c2145cc4b1466069b6b3608c7c95c7fa656674fddeb1f480c19df2f3256e1120dd6ff24c00ee98a0eec2f585c7fda228c4d46db8d9687

    • SSDEEP

      3072:CEGh0oKmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGdl/Oe2MUVg3vTeKcAEciTBqr3

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Auto-generated rule

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks