Analysis
-
max time kernel
153s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25-01-2024 16:51
General
-
Target
3211.exe
-
Size
2.3MB
-
MD5
a8c65a7bb711c410cec42398cfe58d0e
-
SHA1
db0c5252d05528e2cf5024f719d1c1b431694bd8
-
SHA256
0a6f0e58aed060efde84e32fc5838322b930033f97d7e0588fb012b59be69526
-
SHA512
75e27b0522e8e7f0c41eabc113d2a7eefaad0722fbc66b249281b966a8418e1b0b2cd32dd4d03a726c91069203c5b3178c7e464c01df71a0675c5eaf10c15f4d
-
SSDEEP
24576:relo5jh+9b8SL1lAdL5+FPI3YqOcHQSFablTmVfUxquGjHneFUJfKQ2G41w0FX2C:Sl+h+1qs0Y/BTmLuGjHnevQqFr
Score
10/10
Malware Config
Signatures
-
Kinsing
Kinsing is a loader written in Golang.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\3211.exe"C:\Users\Admin\AppData\Local\Temp\3211.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2428-0-0x0000000002630000-0x0000000002631000-memory.dmpFilesize
4KB
-
memory/2428-1-0x0000000000400000-0x0000000000640000-memory.dmpFilesize
2.2MB
-
memory/2428-2-0x0000000000400000-0x0000000000640000-memory.dmpFilesize
2.2MB
-
memory/2428-3-0x0000000002630000-0x0000000002631000-memory.dmpFilesize
4KB