Overview

overview

10

Static

static

3

7509d9427b...df.exe

windows7-x64

6

7509d9427b...df.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7509d9427bf753cf9dafa87adb64c8df

  • Size

    52KB

  • Sample

    240125-vkdexacahn

  • MD5

    7509d9427bf753cf9dafa87adb64c8df

  • SHA1

    ad35734b8f42c3a5e32b907eda5f276ad78339a1

  • SHA256

    7c58dff060dc7c42fa7124e27d2ee7ce8398c2e832e42f50416ee93c170f20b8

  • SHA512

    b0e3cb21527d0f8a89ecee9875efdaf54c09a3de7cd5896c8366f56d01d1a9b331848ac1614c6611197933bd988c053c6b85f8859a057c5777da70b06f9d47e0

  • SSDEEP

    768:qwRndq137gQOCEEL9Lj2Pi08do+cC6O1Kpdd48mSkj1++QN6tT7QD+1fA:qXglioi0AdNvgDZmJj19QNgHM

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      7509d9427bf753cf9dafa87adb64c8df

    • Size

      52KB

    • MD5

      7509d9427bf753cf9dafa87adb64c8df

    • SHA1

      ad35734b8f42c3a5e32b907eda5f276ad78339a1

    • SHA256

      7c58dff060dc7c42fa7124e27d2ee7ce8398c2e832e42f50416ee93c170f20b8

    • SHA512

      b0e3cb21527d0f8a89ecee9875efdaf54c09a3de7cd5896c8366f56d01d1a9b331848ac1614c6611197933bd988c053c6b85f8859a057c5777da70b06f9d47e0

    • SSDEEP

      768:qwRndq137gQOCEEL9Lj2Pi08do+cC6O1Kpdd48mSkj1++QN6tT7QD+1fA:qXglioi0AdNvgDZmJj19QNgHM

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks