kinsing | be7a10558573bc444a303ef61cc7af113fb7ea8a25a460788ccd82c314de4099

Analysis

max time kernel
96s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/01/2024, 17:25

Target
75168505aa6f83b8b8383a41304bef7f.exe
Size 68KB
Sample240125-vzrabacecj
SHA256 be7a10558573bc444a303ef61cc7af113fb7ea8a25a460788ccd82c314de4099
MD5 75168505aa6f83b8b8383a41304bef7f
SHA1 c066efcf645a52fe5fe2a2e351dde2dfd892b639
SHA512 9412264035eafbb50fc496ab33938352f5caead9c8e5e8039b6e71778f73b0901345f84ee6c796d63d5f37260e20e76f68dd279e8eb3a9acfb64bd34a93eab7d
SSDEEP 768:/dtEoM0dkN6MyMZ/ytjirERfE0DJZFU5EAOw84a/5Jlle/ZyG0dkN6MyMZ/ytji4:/drk6M0DJAt8fhTK4fk6M0DJ
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

kinsing loader

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3548	75168505aa6f83b8b8383a41304bef7f.exe

C:\Users\Admin\AppData\Local\Temp\75168505aa6f83b8b8383a41304bef7f.exe
"C:\Users\Admin\AppData\Local\Temp\75168505aa6f83b8b8383a41304bef7f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3548