kinsing | 34781169be5e9033e0b780d3d281fddb0c7df9c0b5140e00f623f9342a1f2f99 | Triage

Sharing

General

Target

750b7ad639421fd67495e5498e0e4829
Size

4.4MB
Sample

240125-vl8mfabcd5
MD5

750b7ad639421fd67495e5498e0e4829
SHA1

e57f4fe94fdfcdb583d8d6701c7e6046fb934275
SHA256

34781169be5e9033e0b780d3d281fddb0c7df9c0b5140e00f623f9342a1f2f99
SHA512

78353c3299ebcfccf79910d326d95a37b63ee9c5c35aa44b9009f900eec7f423039e9922ecf297928b61b6a89ce4969dab615f4abeddb7ca682ecca749a9baa2
SSDEEP

98304:FSORWPYPMOoAv72pgQfmsdIELPMlyJZQTE37WHlzbx:FSNsMOo24gkm0rMsTpWP

Score

10^/10

kinsing loader persistence

Malware Config

Targets

- Target
  
  750b7ad639421fd67495e5498e0e4829
- Size
  
  4.4MB
- MD5
  
  750b7ad639421fd67495e5498e0e4829
- SHA1
  
  e57f4fe94fdfcdb583d8d6701c7e6046fb934275
- SHA256
  
  34781169be5e9033e0b780d3d281fddb0c7df9c0b5140e00f623f9342a1f2f99
- SHA512
  
  78353c3299ebcfccf79910d326d95a37b63ee9c5c35aa44b9009f900eec7f423039e9922ecf297928b61b6a89ce4969dab615f4abeddb7ca682ecca749a9baa2
- SSDEEP
  
  98304:FSORWPYPMOoAv72pgQfmsdIELPMlyJZQTE37WHlzbx:FSNsMOo24gkm0rMsTpWP
Score

10^/10

persistence kinsing loader
- Kinsing
  Kinsing is a loader written in Golang.
  loader kinsing
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

kinsingloaderpersistence