kinsing | 527424ddd6edc19424e3560bc63d6192490b890cbb1e22db0b9a7ffcdb412748

Analysis

max time kernel
89s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
25-01-2024 17:42

Target

2024-01-25_11bfcd92e436a794ba78641401bb754f_gandcrab_karagany.exe
Size

1.4MB
MD5

11bfcd92e436a794ba78641401bb754f
SHA1

f9450770e1f48e4f373d4d633b976054ffc239d4
SHA256

527424ddd6edc19424e3560bc63d6192490b890cbb1e22db0b9a7ffcdb412748
SHA512

9e9f3d343fe99aae970ca486c49ec834a107a9f4a4ec37976b792bef9ae555fe2be0e3706a37f8c3db9bee928aa4641138e1aab6cb0f52edbf6b132c6c92fceb
SSDEEP

6144:hjDtORruiMyqqDL6tvdUp9rqElBzToKjWgED4:hjnqn6jI9r1zTHWg

Score

10^/10

kinsing loader

Kinsing
Kinsing is a loader written in Golang.
loader kinsing
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1924 4176 WerFault.exe 2024-01-25_11bfcd92e436a794ba78641401bb754f_gandcrab_karagany.exe

pid	pid_target	process	target process
1924	4176	WerFault.exe	2024-01-25_11bfcd92e436a794ba78641401bb754f_gandcrab_karagany.exe

C:\Users\Admin\AppData\Local\Temp\2024-01-25_11bfcd92e436a794ba78641401bb754f_gandcrab_karagany.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-25_11bfcd92e436a794ba78641401bb754f_gandcrab_karagany.exe"
1⤵
PID:4176

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4176 -s 72
2⤵
- Program crash
PID:1924

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4176 -ip 4176
1⤵
PID:4324