Analysis
- max time kernel
93s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
- submitted
25/01/2024, 17:42
General
- Target 751f32ae70d7695c642c0e469b7b085f.exe
- Size 9KB
- Sample240125-v97eaabhf8
- SHA256 4851aeb6c5100b7dcf464a7cbc7e09ae00bba780fac4ab4783479a3d6f99deed
Score
10/10
Malware Config
Signatures
- Kinsing
Kinsing is a loader written in Golang.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\751f32ae70d7695c642c0e469b7b085f.exe"C:\Users\Admin\AppData\Local\Temp\751f32ae70d7695c642c0e469b7b085f.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1588-0-0x0000000000980000-0x0000000000988000-memory.dmp
memory/1588-2-0x00007FF91F580000-0x00007FF920041000-memory.dmp
memory/1588-1-0x0000000002A00000-0x0000000002A12000-memory.dmp
memory/1588-3-0x0000000002A60000-0x0000000002A9C000-memory.dmp
memory/1588-4-0x0000000002BF0000-0x0000000002C00000-memory.dmp
memory/1588-5-0x00007FF91F580000-0x00007FF920041000-memory.dmp
memory/1588-6-0x00007FF91F580000-0x00007FF920041000-memory.dmp