Overview

overview

10

Static

static

3

2024-01-25...uk.exe

windows7-x64

5

2024-01-25...uk.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_99300b525218b2a5bf5b16fe257f8a6b_ryuk

  • Size

    3.4MB

  • Sample

    240125-vbml8abghm

  • MD5

    99300b525218b2a5bf5b16fe257f8a6b

  • SHA1

    3d0919de8c2af3b43a492689f3ceaa427ba019ec

  • SHA256

    263c74e6c34ca7b21f486d001650a5483eb0a595b475c6f995c9453db43bc6fc

  • SHA512

    38889cc0511c80de5d16b912e7cc60a414fe61acf6bb7e17b5d5b5ce21f5fb20c22c8c91cbb0c82d6ac4b500e941ecc6e3584ad9b8d422e36ad53850e9224374

  • SSDEEP

    49152:lQ+UuuLhdDM3xt+5YqcYsdJE1fyMt4cltQsx2eoqo5rN1ggWrJSdj5ik+pFzz+/a:lQv5o7FeW5rN1UEjX+pFtFR

Score
10/10
kinsingloaderspywarestealer

Malware Config

Targets

    • Target

      2024-01-25_99300b525218b2a5bf5b16fe257f8a6b_ryuk

    • Size

      3.4MB

    • MD5

      99300b525218b2a5bf5b16fe257f8a6b

    • SHA1

      3d0919de8c2af3b43a492689f3ceaa427ba019ec

    • SHA256

      263c74e6c34ca7b21f486d001650a5483eb0a595b475c6f995c9453db43bc6fc

    • SHA512

      38889cc0511c80de5d16b912e7cc60a414fe61acf6bb7e17b5d5b5ce21f5fb20c22c8c91cbb0c82d6ac4b500e941ecc6e3584ad9b8d422e36ad53850e9224374

    • SSDEEP

      49152:lQ+UuuLhdDM3xt+5YqcYsdJE1fyMt4cltQsx2eoqo5rN1ggWrJSdj5ik+pFzz+/a:lQv5o7FeW5rN1UEjX+pFtFR

    Score
    10/10
    kinsingloaderspywarestealer

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks