Overview

overview

10

Static

static

3

7510438c8f...32.exe

windows7-x64

10

7510438c8f...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7510438c8f53e38f184eae2ded6a0632

  • Size

    55KB

  • Sample

    240125-vrml6accem

  • MD5

    7510438c8f53e38f184eae2ded6a0632

  • SHA1

    37efce67693e841ac78a46b452d33ac59dbc7a52

  • SHA256

    4aa1f431111c15ef5348730b0148899bf531447a14c13700c8565e65b2b0b934

  • SHA512

    1d8ca6d6886a0823fa3e3398d5e1a2e8ce7e7e1fa5f00d008570d5168e076925cdcb1137cb4e6f81322e98b2e9c4300eefe1d9885cda45e90bd2a04b0e50a02e

  • SSDEEP

    768:I+dob+paHabE/nlLd0E7cx7jGarox3cp6tLkZn2/n2wKd6T7fb2p/1H5LXdnh:9G+/E/nAxv7oDQPIb2Lr

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      7510438c8f53e38f184eae2ded6a0632

    • Size

      55KB

    • MD5

      7510438c8f53e38f184eae2ded6a0632

    • SHA1

      37efce67693e841ac78a46b452d33ac59dbc7a52

    • SHA256

      4aa1f431111c15ef5348730b0148899bf531447a14c13700c8565e65b2b0b934

    • SHA512

      1d8ca6d6886a0823fa3e3398d5e1a2e8ce7e7e1fa5f00d008570d5168e076925cdcb1137cb4e6f81322e98b2e9c4300eefe1d9885cda45e90bd2a04b0e50a02e

    • SSDEEP

      768:I+dob+paHabE/nlLd0E7cx7jGarox3cp6tLkZn2/n2wKd6T7fb2p/1H5LXdnh:9G+/E/nAxv7oDQPIb2Lr

    Score
    10/10
    persistencekinsingloader

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks