Overview

overview

10

Static

static

3

750ec45944...88.exe

windows7-x64

6

750ec45944...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    750ec45944d77c6e8967fd1c3e3bf188

  • Size

    197KB

  • Sample

    240125-vqn4labdb2

  • MD5

    750ec45944d77c6e8967fd1c3e3bf188

  • SHA1

    eb6afdd3c7236e7ca5d0016c2f51b02f7d4403a2

  • SHA256

    d77a562b77b147616b6ebe245fe2ca92bee22da4f13d92be731bf5262842738e

  • SHA512

    8f435ef2d6a79e6322784591000d96ec9c464d61bc520bc1e5ac216e9ae24d9bc4bd2b4b624f3fe36615ff1ed8696c702fce31830994ceab4adaf8e0da626e43

  • SSDEEP

    3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B87pjIkgnq:o68i3odBiTl2+TCU/WIk8q

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      750ec45944d77c6e8967fd1c3e3bf188

    • Size

      197KB

    • MD5

      750ec45944d77c6e8967fd1c3e3bf188

    • SHA1

      eb6afdd3c7236e7ca5d0016c2f51b02f7d4403a2

    • SHA256

      d77a562b77b147616b6ebe245fe2ca92bee22da4f13d92be731bf5262842738e

    • SHA512

      8f435ef2d6a79e6322784591000d96ec9c464d61bc520bc1e5ac216e9ae24d9bc4bd2b4b624f3fe36615ff1ed8696c702fce31830994ceab4adaf8e0da626e43

    • SSDEEP

      3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B87pjIkgnq:o68i3odBiTl2+TCU/WIk8q

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks