kinsing | 2cde0bb963e183d21347c2caaa235b41f4da3457746056fa7dc46a9f2962c6a5 | Triage

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-01-2024 17:03

Sharing

Report Analysis Logs

General

Target

750ab0801973805e02ed57af432e121b.exe
Size

60KB
MD5

750ab0801973805e02ed57af432e121b
SHA1

6bb5827d2063c5c2261f1bebd225dc559edaf89b
SHA256

2cde0bb963e183d21347c2caaa235b41f4da3457746056fa7dc46a9f2962c6a5
SHA512

8aca52a1e434f1e80b19dfec44de5b9eaa6575b96e623483a8372488d07ab88aba29da9c85e2368ec6e64d2601378e9860062160d36927192856d127f78d011a
SSDEEP

1536:UAU15FUw+2MpVy0AhFXvEuPEtrLKtyfX9bH4:y33MpVmX5ILKtyFY

Score

10^/10

kinsing loader

Malware Config

Signatures

Kinsing
Kinsing is a loader written in Golang.
loader kinsing
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4496 1080 WerFault.exe 750ab0801973805e02ed57af432e121b.exe

C:\Users\Admin\AppData\Local\Temp\750ab0801973805e02ed57af432e121b.exe
"C:\Users\Admin\AppData\Local\Temp\750ab0801973805e02ed57af432e121b.exe"
1⤵
PID:1080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1080 -s 296
2⤵
- Program crash
PID:4496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1080 -ip 1080
1⤵
PID:5104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...