Overview

overview

10

Static

static

3

2024-01-25...uk.exe

windows7-x64

1

2024-01-25...uk.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_5b138f089323333e78c979e4dbcae22c_ryuk

  • Size

    5.5MB

  • Sample

    240125-vmdtfscbdm

  • MD5

    5b138f089323333e78c979e4dbcae22c

  • SHA1

    4b773efe47b437372b41e00e175d52e65f358c4e

  • SHA256

    50683ddb36493bd018c5c0a69ba63ce2701506e9de05a2149aefcc60e2c7afea

  • SHA512

    a46a9dba97ea79c8b6b0b90528d2efa9c7eca54daa927efac0fd8f577bcd3aae5ae4861455b477f680d0398a2e00b0c096f59b5f887b80312e7eac58594c0b05

  • SSDEEP

    49152:lEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGfU:5AI5pAdV9n9tbnR1VgBVmDB2Yyjl

Score
10/10
kinsingloaderspywarestealer

Malware Config

Targets

    • Target

      2024-01-25_5b138f089323333e78c979e4dbcae22c_ryuk

    • Size

      5.5MB

    • MD5

      5b138f089323333e78c979e4dbcae22c

    • SHA1

      4b773efe47b437372b41e00e175d52e65f358c4e

    • SHA256

      50683ddb36493bd018c5c0a69ba63ce2701506e9de05a2149aefcc60e2c7afea

    • SHA512

      a46a9dba97ea79c8b6b0b90528d2efa9c7eca54daa927efac0fd8f577bcd3aae5ae4861455b477f680d0398a2e00b0c096f59b5f887b80312e7eac58594c0b05

    • SSDEEP

      49152:lEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGfU:5AI5pAdV9n9tbnR1VgBVmDB2Yyjl

    Score
    10/10
    kinsingloaderspywarestealer

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks