Overview

overview

10

Static

static

3

tmp.exe

windows7-x64

7

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    12.8MB

  • Sample

    240125-vrtqgaccfj

  • MD5

    c26969afb4d14b8a57e313173b6f0e99

  • SHA1

    9f1d429af7b2beabae3108cbb0ef4c499491f356

  • SHA256

    942b0d0071e2668a886f5704ee61cfe5225990bc51fc8831cc89bc4300543802

  • SHA512

    a56a84a961fa7931577d80da4c60bc477962ba5eb2d70223e47f45d99299ba2ad1199f09bf2b618a2b414c2948ebb0a28db05fcfe8578d331630c0438c68fb60

  • SSDEEP

    196608:fYFWAQhhSsXZJorYwXGc/Wmk7ZoP1NQsT2kYBqyLfi7lYSANK728OznHHXuJVv5:fY8RSQMswWc/WmTTFYgGSANKyTXu

Score
10/10
kinsingaspackv2loader

Malware Config

Targets

    • Target

      tmp

    • Size

      12.8MB

    • MD5

      c26969afb4d14b8a57e313173b6f0e99

    • SHA1

      9f1d429af7b2beabae3108cbb0ef4c499491f356

    • SHA256

      942b0d0071e2668a886f5704ee61cfe5225990bc51fc8831cc89bc4300543802

    • SHA512

      a56a84a961fa7931577d80da4c60bc477962ba5eb2d70223e47f45d99299ba2ad1199f09bf2b618a2b414c2948ebb0a28db05fcfe8578d331630c0438c68fb60

    • SSDEEP

      196608:fYFWAQhhSsXZJorYwXGc/Wmk7ZoP1NQsT2kYBqyLfi7lYSANK728OznHHXuJVv5:fY8RSQMswWc/WmTTFYgGSANKyTXu

    Score
    10/10
    aspackv2kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks