Overview

overview

10

Static

static

3

7508430f17...39.exe

windows7-x64

1

7508430f17...39.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    91s
  • max time network
    104s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-01-2024 16:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7508430f17214ec640322324ae75b639.exe

  • Size

    192KB

  • MD5

    7508430f17214ec640322324ae75b639

  • SHA1

    f44522d00e2b079b5bc6c0701a4670f35a5c1785

  • SHA256

    6fdd91f9ff2a483afa13bf9908ee70cecce36187649bac13dad6aa8d6a7a9e60

  • SHA512

    11ad596f93bf5d75f2b0530737e2f7d6076353e5d035a02f30a3c28b160bd4dcc6c8b362e0b46710e5f6c3d6adbd1628f82ea86f83e9d95bbbdceaf03b169f77

  • SSDEEP

    1536:u3iELQG6kkhxGJRYfpJlTkKei0TYVaPatVNB8pc5/ssl1yMIOMK/sMl1yMIOMVy:YirWkWJU49TYUitVN3F2MIOVZ2MIOqy

Score
10/10
kinsingloader

Malware Config

Signatures

  • Kinsing

    Kinsing is a loader written in Golang.

    loaderkinsing
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7508430f17214ec640322324ae75b639.exe
    "C:\Users\Admin\AppData\Local\Temp\7508430f17214ec640322324ae75b639.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3580-0-0x0000000000400000-0x0000000000432000-memory.dmp
    Filesize

    200KB

    Download