Overview

overview

10

Static

static

3

7501ab5980...e4.exe

windows7-x64

7

7501ab5980...e4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7501ab598090fcbdcc4697ed6e8eace4

  • Size

    40KB

  • Sample

    240125-va21hsbggm

  • MD5

    7501ab598090fcbdcc4697ed6e8eace4

  • SHA1

    6f591cafa0d5e3d82d92a6b2aaa045d0a5c9c61d

  • SHA256

    44915f1a2530f1d37e4a9d074e8a8de216b272071b8f720bbad5357d9418118e

  • SHA512

    ed9d426018abfb629a14c3255bcc4f217bd678fad4ddbfe5a3c6df09b246eece48156c02ff1da092bd0d0b287cd87c59143ac77b070ed47f6ce08dd25f7fff4b

  • SSDEEP

    768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtH5RP:aqk/Zdic/qjh8w19JDHXP

Score
10/10
kinsingloaderpersistenceupx

Malware Config

Targets

    • Target

      7501ab598090fcbdcc4697ed6e8eace4

    • Size

      40KB

    • MD5

      7501ab598090fcbdcc4697ed6e8eace4

    • SHA1

      6f591cafa0d5e3d82d92a6b2aaa045d0a5c9c61d

    • SHA256

      44915f1a2530f1d37e4a9d074e8a8de216b272071b8f720bbad5357d9418118e

    • SHA512

      ed9d426018abfb629a14c3255bcc4f217bd678fad4ddbfe5a3c6df09b246eece48156c02ff1da092bd0d0b287cd87c59143ac77b070ed47f6ce08dd25f7fff4b

    • SSDEEP

      768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtH5RP:aqk/Zdic/qjh8w19JDHXP

    Score
    10/10
    persistenceupxkinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks