Overview

overview

10

Static

static

7

7512aeaabc...61.exe

windows7-x64

7

7512aeaabc...61.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7512aeaabc9121acae31ab38edb2ba61

  • Size

    11KB

  • Sample

    240125-vvl5sscdbp

  • MD5

    7512aeaabc9121acae31ab38edb2ba61

  • SHA1

    f4a053c6de78f4aea3ecc3ec7e75e5946ffe932f

  • SHA256

    e2aada4f8c14f09c18977e9bba42233d7cc7575502b379a4f95701658907c962

  • SHA512

    770e0f4d6f4d4a60aa3b53d040e89c195da89c50c48d097bc6f46931d3a596214d21d7cd5e8038ceb245015f6208c5917c8a70053341102cb9a3fcdaa4ab0675

  • SSDEEP

    192:nwh85gw7e+gUpY/fFaNJhLkwcud2DH9VwGfctAphgpNfFUJ/j:whA5e+gUp2aNJawcudoD7Uk6z9U1j

Score
10/10
kinsingloaderupx

Malware Config

Targets

    • Target

      7512aeaabc9121acae31ab38edb2ba61

    • Size

      11KB

    • MD5

      7512aeaabc9121acae31ab38edb2ba61

    • SHA1

      f4a053c6de78f4aea3ecc3ec7e75e5946ffe932f

    • SHA256

      e2aada4f8c14f09c18977e9bba42233d7cc7575502b379a4f95701658907c962

    • SHA512

      770e0f4d6f4d4a60aa3b53d040e89c195da89c50c48d097bc6f46931d3a596214d21d7cd5e8038ceb245015f6208c5917c8a70053341102cb9a3fcdaa4ab0675

    • SSDEEP

      192:nwh85gw7e+gUpY/fFaNJhLkwcud2DH9VwGfctAphgpNfFUJ/j:whA5e+gUp2aNJawcudoD7Uk6z9U1j

    Score
    10/10
    upxkinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks