Overview

overview

10

Static

static

1

TAXDOCUMEN...CH.rar

windows7-x64

3

TAXDOCUMEN...CH.rar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TAXDOCUMENTS_TIMCH.rar

  • Size

    2.3MB

  • Sample

    240125-vywteacdhq

  • MD5

    55ba326f0e05ac78754238757774470e

  • SHA1

    69a2a16a3baa58b0be05a8604379e59689aea3df

  • SHA256

    2c18c04ee54fe7b915537e2ed85e9b4ad43efeeddd6756345afffd02bae19205

  • SHA512

    174144bfea0ed59ae898eb0f668c6e1035b29dddb4c640cc6131e9e173a845abfdddaa3e777b1c79ce1d47addeb8c3ca805d707ff47a81a8b5ac30ad640b5b63

  • SSDEEP

    49152:vP55W8qvmr0niTbxUMnBpwxKYhmzIjXU5so4JzlwT2:5c8aE+AuGBpfYMzkU2zzlwC

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      TAXDOCUMENTS_TIMCH.rar

    • Size

      2.3MB

    • MD5

      55ba326f0e05ac78754238757774470e

    • SHA1

      69a2a16a3baa58b0be05a8604379e59689aea3df

    • SHA256

      2c18c04ee54fe7b915537e2ed85e9b4ad43efeeddd6756345afffd02bae19205

    • SHA512

      174144bfea0ed59ae898eb0f668c6e1035b29dddb4c640cc6131e9e173a845abfdddaa3e777b1c79ce1d47addeb8c3ca805d707ff47a81a8b5ac30ad640b5b63

    • SSDEEP

      49152:vP55W8qvmr0niTbxUMnBpwxKYhmzIjXU5so4JzlwT2:5c8aE+AuGBpfYMzkU2zzlwC

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks