kinsing | 3fb0571dcf45adfcdf2c6807fe7518b88b8d5d7989643c338328e8cabcff4afc | Triage

Sharing

General

Target

7508d3a74c0efc2412cfd5d0cdcaa4e9
Size

2.2MB
Sample

240125-vh2dyscaep
MD5

7508d3a74c0efc2412cfd5d0cdcaa4e9
SHA1

9d640a81ef79533c1a1f9e8089a641aadf109ce5
SHA256

3fb0571dcf45adfcdf2c6807fe7518b88b8d5d7989643c338328e8cabcff4afc
SHA512

69e4dc2bf93dcaf0fadd6e455a6f3f27e133b8e53870f051a05f44959d335595f2c642112ff51f82fae2e445a69f5a1136c5d610976df0fa11df8d8ef7f9166d
SSDEEP

49152:Zqf+9GLccwpWfYCjRkCXDg5V70MU1JU7eza/Bh0HFUAz:ZTULcpUfY+RWTay3/k

Score

10^/10

kinsing loader persistence

Malware Config

Targets

- Target
  
  7508d3a74c0efc2412cfd5d0cdcaa4e9
- Size
  
  2.2MB
- MD5
  
  7508d3a74c0efc2412cfd5d0cdcaa4e9
- SHA1
  
  9d640a81ef79533c1a1f9e8089a641aadf109ce5
- SHA256
  
  3fb0571dcf45adfcdf2c6807fe7518b88b8d5d7989643c338328e8cabcff4afc
- SHA512
  
  69e4dc2bf93dcaf0fadd6e455a6f3f27e133b8e53870f051a05f44959d335595f2c642112ff51f82fae2e445a69f5a1136c5d610976df0fa11df8d8ef7f9166d
- SSDEEP
  
  49152:Zqf+9GLccwpWfYCjRkCXDg5V70MU1JU7eza/Bh0HFUAz:ZTULcpUfY+RWTay3/k
Score

10^/10

persistence kinsing loader
- Kinsing
  Kinsing is a loader written in Golang.
  loader kinsing
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

kinsingloaderpersistence