Analysis
-
max time kernel
93s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
25-01-2024 17:42
General
-
Target
751f32ae70d7695c642c0e469b7b085f.exe
-
Size
9KB
-
MD5
751f32ae70d7695c642c0e469b7b085f
-
SHA1
29fff9f46b5d30208de2c959b89c3dcf58955269
-
SHA256
4851aeb6c5100b7dcf464a7cbc7e09ae00bba780fac4ab4783479a3d6f99deed
-
SHA512
d5201e38a1b15051a3a498383690a0e70947fd87d411569bb828d46d370b8768be3fd9d0c7a15a504d7238da8e3503c277f2c25593022483c1b2bea5a0e00f67
-
SSDEEP
192:wBksunPY82gQv5F4VtaeMZZ3v93VnjdwCzB3U+Xzc:882l4VtaeMJFnhwC9E+Xz
Score
10/10
Malware Config
Signatures
-
Kinsing
Kinsing is a loader written in Golang.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\751f32ae70d7695c642c0e469b7b085f.exe"C:\Users\Admin\AppData\Local\Temp\751f32ae70d7695c642c0e469b7b085f.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
10.8MB
-
Filesize
72KB
-
Filesize
240KB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
10.8MB