Overview

overview

10

Static

static

3

7522dc5a16...b1.exe

windows7-x64

6

7522dc5a16...b1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7522dc5a163d4c239ff4a6f347c697b1

  • Size

    187KB

  • Sample

    240125-we61pscah5

  • MD5

    7522dc5a163d4c239ff4a6f347c697b1

  • SHA1

    aea492a8555383c8f9fee9ddd0942f357771e4b1

  • SHA256

    8c9481f3d8e34722348ad2af46c3437494f55bd700338a571b10deb2b5b0b412

  • SHA512

    d424ee40605d3d62489954268737dda35ddc5fe3ab2a3765bbab7acc1a737389a6648aabd4ccd578a1029a9e3dc843aba5af0bf525c4efa48b1e93e8d8db9682

  • SSDEEP

    3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8qh1K:o68i3odBiTl2+TCU/R1K

Score
10/10
kinsingloaderpersistence

Malware Config

Targets

    • Target

      7522dc5a163d4c239ff4a6f347c697b1

    • Size

      187KB

    • MD5

      7522dc5a163d4c239ff4a6f347c697b1

    • SHA1

      aea492a8555383c8f9fee9ddd0942f357771e4b1

    • SHA256

      8c9481f3d8e34722348ad2af46c3437494f55bd700338a571b10deb2b5b0b412

    • SHA512

      d424ee40605d3d62489954268737dda35ddc5fe3ab2a3765bbab7acc1a737389a6648aabd4ccd578a1029a9e3dc843aba5af0bf525c4efa48b1e93e8d8db9682

    • SSDEEP

      3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8qh1K:o68i3odBiTl2+TCU/R1K

    Score
    10/10
    persistencekinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks