Overview

overview

10

Static

static

3

2024-01-25...uk.exe

windows7-x64

1

2024-01-25...uk.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_b928318d666bedccf2eafcf35ef8e0e4_ryuk

  • Size

    2.0MB

  • Sample

    240125-veaf3abhfj

  • MD5

    b928318d666bedccf2eafcf35ef8e0e4

  • SHA1

    43bd0b736c7329ac4b69a502a27a8335f26afb64

  • SHA256

    6d28300ad3d41b02069f6346231645a3fec570f2c3c2f8a9e3b48d47ccd4da9f

  • SHA512

    78b8b3bc85481f4b6eb14b3bdd07ec68565c2b48c9feb47a9f91df05317d500deee6e0f53a20d9fec842ef14a70f1f18d1e3acdd65e13fa6f0f7b5ad9308d905

  • SSDEEP

    24576:mniCqTZWzkyyUOzlEzXrd1AdC+H8iDWJqzUnt3I4X8+RZZebSd6Y:miCuZSkSOzOB1AAe8BJ1pI4s+RfeGd6

Score
10/10
kinsingloaderspywarestealer

Malware Config

Targets

    • Target

      2024-01-25_b928318d666bedccf2eafcf35ef8e0e4_ryuk

    • Size

      2.0MB

    • MD5

      b928318d666bedccf2eafcf35ef8e0e4

    • SHA1

      43bd0b736c7329ac4b69a502a27a8335f26afb64

    • SHA256

      6d28300ad3d41b02069f6346231645a3fec570f2c3c2f8a9e3b48d47ccd4da9f

    • SHA512

      78b8b3bc85481f4b6eb14b3bdd07ec68565c2b48c9feb47a9f91df05317d500deee6e0f53a20d9fec842ef14a70f1f18d1e3acdd65e13fa6f0f7b5ad9308d905

    • SSDEEP

      24576:mniCqTZWzkyyUOzlEzXrd1AdC+H8iDWJqzUnt3I4X8+RZZebSd6Y:miCuZSkSOzOB1AAe8BJ1pI4s+RfeGd6

    Score
    10/10
    kinsingloaderspywarestealer

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks