Overview

overview

10

Static

static

3

2024-01-25...uk.exe

windows7-x64

7

2024-01-25...uk.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_dab9c6017e3e7cf447ee6a9b3170d9e0_ryuk

  • Size

    1.6MB

  • Sample

    240125-vjnjgsbbf7

  • MD5

    dab9c6017e3e7cf447ee6a9b3170d9e0

  • SHA1

    93d47ffc0fe20ec219bc72936e7728ad6754a143

  • SHA256

    142a4c77ccb8973af88950096903409df2cf8caad7b9e3a1db65704669b1c858

  • SHA512

    e2b3c4a169990a6d666777d385fc41868b121ddc889db88fa84a27ebb519cb9590d723ba0d77e0fc0a61a089bc2af0a1abd5d74a2f611e32925ff68c82f82dc1

  • SSDEEP

    24576:6Z7+0IbaEOtqZpp0YYtwlGhNsof2e7A+ebC:6Z7+0IWHmpSK8hWomh

Score
10/10
kinsingloaderspywarestealer

Malware Config

Targets

    • Target

      2024-01-25_dab9c6017e3e7cf447ee6a9b3170d9e0_ryuk

    • Size

      1.6MB

    • MD5

      dab9c6017e3e7cf447ee6a9b3170d9e0

    • SHA1

      93d47ffc0fe20ec219bc72936e7728ad6754a143

    • SHA256

      142a4c77ccb8973af88950096903409df2cf8caad7b9e3a1db65704669b1c858

    • SHA512

      e2b3c4a169990a6d666777d385fc41868b121ddc889db88fa84a27ebb519cb9590d723ba0d77e0fc0a61a089bc2af0a1abd5d74a2f611e32925ff68c82f82dc1

    • SSDEEP

      24576:6Z7+0IbaEOtqZpp0YYtwlGhNsof2e7A+ebC:6Z7+0IWHmpSK8hWomh

    Score
    10/10
    spywarestealerkinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks