Overview

overview

10

Static

static

3

Medusa.uno.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Medusa.uno.dll

  • Size

    2.2MB

  • Sample

    240125-vn8efsbcg8

  • MD5

    6dff3714b10fcc6d4ddee58009e343b2

  • SHA1

    c54eaf8373151d8c5ed604610fdb8cd49159ad3e

  • SHA256

    bcd7a153c91dc7932937a16e9f041abe310d1304bfff5523198f867a9c5689bc

  • SHA512

    68836b76fce94171ed59bb99466a364a8066bad70326c4302f42a80037159707e6d0c5dfcbd01c4f1c38f3d5f4b538d074533dfee017df03c4d4ca599011eaec

  • SSDEEP

    49152:cwXPFPCc/6Kkg3TPOeKScYZA67Cxct7/vRyci6d+y99E0u:pPOeKSc0A6R/vRysdA

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      Medusa.uno.dll

    • Size

      2.2MB

    • MD5

      6dff3714b10fcc6d4ddee58009e343b2

    • SHA1

      c54eaf8373151d8c5ed604610fdb8cd49159ad3e

    • SHA256

      bcd7a153c91dc7932937a16e9f041abe310d1304bfff5523198f867a9c5689bc

    • SHA512

      68836b76fce94171ed59bb99466a364a8066bad70326c4302f42a80037159707e6d0c5dfcbd01c4f1c38f3d5f4b538d074533dfee017df03c4d4ca599011eaec

    • SSDEEP

      49152:cwXPFPCc/6Kkg3TPOeKScYZA67Cxct7/vRyci6d+y99E0u:pPOeKSc0A6R/vRysdA

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks