Overview

overview

10

Static

static

3

75095254b6...a4.exe

windows7-x64

7

75095254b6...a4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75095254b6b84c567db25f0885fdbea4

  • Size

    385KB

  • Sample

    240125-vjjwasbbf5

  • MD5

    75095254b6b84c567db25f0885fdbea4

  • SHA1

    d44383edba434a7cfe47787b252c92a9fcc509ce

  • SHA256

    ae93608491c5720158eccab3f3bf83cd4c5b3f4e6df93b08a8a14d7d9b9621e2

  • SHA512

    9b193af97be3bdac40aa58fb01ba079d09f0ad9a890d78692bf75c1cfe598bb07eec652cc18535cb9eda8b7b4eee39a62b04d8093aa211d15414ab576bf681d9

  • SSDEEP

    12288:hQgQXE+kMZ7KXlOlU73ABD7OQ50MORnlrYgB:iPE+kMBulyU7Q2fnrB

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      75095254b6b84c567db25f0885fdbea4

    • Size

      385KB

    • MD5

      75095254b6b84c567db25f0885fdbea4

    • SHA1

      d44383edba434a7cfe47787b252c92a9fcc509ce

    • SHA256

      ae93608491c5720158eccab3f3bf83cd4c5b3f4e6df93b08a8a14d7d9b9621e2

    • SHA512

      9b193af97be3bdac40aa58fb01ba079d09f0ad9a890d78692bf75c1cfe598bb07eec652cc18535cb9eda8b7b4eee39a62b04d8093aa211d15414ab576bf681d9

    • SSDEEP

      12288:hQgQXE+kMZ7KXlOlU73ABD7OQ50MORnlrYgB:iPE+kMBulyU7Q2fnrB

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks