Overview

overview

10

Static

static

3

2024-01-25...uk.exe

windows7-x64

1

2024-01-25...uk.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_e7e3894e09e1147c934e62c4dc0cfc2f_ryuk

  • Size

    2.2MB

  • Sample

    240125-vpy76sbch6

  • MD5

    e7e3894e09e1147c934e62c4dc0cfc2f

  • SHA1

    7559cb8e6c5b5223774b0f362c6ad906ad3d1c9a

  • SHA256

    81f4fbe28b41d3f6a1f0f325a5a702a8309c204f3edd9b94899a816da31bfdd0

  • SHA512

    dfea8811126930a82b836474ea9cc4653d5cd1da482655bea59d036a3f389491c1aa506f7f8ef9b9f3f123d19bbdd073cf09867c19244bbef79d6a2d53afc794

  • SSDEEP

    49152:cOOh3aN4FuLbegmtG2f9Ckt7c20+9qNxUW:GU4Fu/ctJfEkKK90

Score
10/10
kinsingloaderspywarestealer

Malware Config

Targets

    • Target

      2024-01-25_e7e3894e09e1147c934e62c4dc0cfc2f_ryuk

    • Size

      2.2MB

    • MD5

      e7e3894e09e1147c934e62c4dc0cfc2f

    • SHA1

      7559cb8e6c5b5223774b0f362c6ad906ad3d1c9a

    • SHA256

      81f4fbe28b41d3f6a1f0f325a5a702a8309c204f3edd9b94899a816da31bfdd0

    • SHA512

      dfea8811126930a82b836474ea9cc4653d5cd1da482655bea59d036a3f389491c1aa506f7f8ef9b9f3f123d19bbdd073cf09867c19244bbef79d6a2d53afc794

    • SSDEEP

      49152:cOOh3aN4FuLbegmtG2f9Ckt7c20+9qNxUW:GU4Fu/ctJfEkKK90

    Score
    10/10
    kinsingloaderspywarestealer

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks