Overview

overview

10

Static

static

3

DHL_AWB#60...91.exe

windows7-x64

5

DHL_AWB#60...91.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DHL_AWB#6078538091.rar

  • Size

    667KB

  • Sample

    240125-vwzghscdel

  • MD5

    c183c03b97fb23eba07e519a0ebf73f9

  • SHA1

    7c27dec25511c21f2c7eac2262cb9501eb9dd573

  • SHA256

    c101bc6ce098c1531987543175771b755ebe79616497c5114ef510571c5f3d32

  • SHA512

    38ea3164219c5594e80407b749122854c89485bb218792d05cabc0a42734832c5971d779aa56f12a326db0f36c7f2ba02af4d9b2647f5f489dbbf3ba602fb84c

  • SSDEEP

    12288:y9ZTQoW7i1DKX51c1KQwPaBgsmsPO4Kg+HlRsaxn1RhXvSLRcrnb:yPTjSmS1cAPBLN++HHsax1RdEarnb

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      DHL_AWB#6078538091.exe

    • Size

      743KB

    • MD5

      2685c5b3d73fe94a815a84c1dd5813ef

    • SHA1

      edf893ff59c3437e942fd8cd40c9381ef536dbf2

    • SHA256

      27769f4bb96d0e605bdc282658c6a729e4ceb8447cd9e1f9880c69862258e66f

    • SHA512

      a989d2198b0a9d8bddff535bd821c124b347cbdb0a2ffb91ce76b9d91a4847e38ffd2a58300e53366004628729d5ac9d9dfc10539ae6808ab6c3d26877e6fc65

    • SSDEEP

      12288:X4nWcI58atfrHsfjGrfrtofP/l1rkxNVOIiB3bow5404ni0C0eb:X4Y5JDsfjStMn3rkxNo+w5/4+0

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks