Analysis
-
max time kernel
93s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
25-01-2024 17:39
General
-
Target
2024-01-25_e04dc3e58328e66254a5acc8b957e862_eclipsesuncloudrat_mafia.exe
-
Size
1.6MB
-
MD5
e04dc3e58328e66254a5acc8b957e862
-
SHA1
16da75f4c010d2a5704e24348bd739dbb1fa02a7
-
SHA256
209d92309941f0177af3d35e63edc760e5c46540160652179ebbb1b5049e2b73
-
SHA512
a6da2e1897b913f6b86e3b7d99638537de72c741e86178dd3c750ac1baf40e010ae29b60942749523a52ae96c040f73ed9791e9739059769a5c2255808af0e40
-
SSDEEP
49152:IeTlRwWL4LbAME7228ZCZCA04CVfS4zm045VX1JVgLiqm7YEbkArQeT:LRwbLbAMMeZCCA04CVfS4zvCVl+A7YE1
Score
10/10
Malware Config
Signatures
-
Kinsing
Kinsing is a loader written in Golang.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-25_e04dc3e58328e66254a5acc8b957e862_eclipsesuncloudrat_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-25_e04dc3e58328e66254a5acc8b957e862_eclipsesuncloudrat_mafia.exe"1⤵
- Suspicious use of SetWindowsHookEx