kinsing | 296f7eecb994ab8b677ff5c7ad9abb7039c800cf5860ac2945e044e236dabf27 | Triage

Sharing

General

Target

7502f91d4f123f4244451c3a0087e642
Size

60KB
Sample

240125-vct3pabhcl
MD5

7502f91d4f123f4244451c3a0087e642
SHA1

5a4ac9867954551e4bfa9308eee8438fc14bf1ad
SHA256

296f7eecb994ab8b677ff5c7ad9abb7039c800cf5860ac2945e044e236dabf27
SHA512

5dd8e78cc64284b5762d8f0281862b220219b443f01cdc6fd4c92e26f073a1665bfc68b4cca7a1c5f598bd649a00e13e99094b0302ba22e5f773adca8105cf7b
SSDEEP

768:uGMVESUM0SULlpzK3K1Sv1edURL6HL0x32ba/2sQDbNFAY0cMEMzh5:uGynUr33uoS0RrI3saOscAES5

Score

10^/10

kinsing loader persistence

Malware Config

Targets

- Target
  
  7502f91d4f123f4244451c3a0087e642
- Size
  
  60KB
- MD5
  
  7502f91d4f123f4244451c3a0087e642
- SHA1
  
  5a4ac9867954551e4bfa9308eee8438fc14bf1ad
- SHA256
  
  296f7eecb994ab8b677ff5c7ad9abb7039c800cf5860ac2945e044e236dabf27
- SHA512
  
  5dd8e78cc64284b5762d8f0281862b220219b443f01cdc6fd4c92e26f073a1665bfc68b4cca7a1c5f598bd649a00e13e99094b0302ba22e5f773adca8105cf7b
- SSDEEP
  
  768:uGMVESUM0SULlpzK3K1Sv1edURL6HL0x32ba/2sQDbNFAY0cMEMzh5:uGynUr33uoS0RrI3saOscAES5
Score

10^/10

persistence kinsing loader
- Kinsing
  Kinsing is a loader written in Golang.
  loader kinsing
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

kinsingloaderpersistence