kinsing_aarch64
Classification: Malicious
kinsing_aarch64 is a trojan. Detected by 61 antivirus engines. Linked to Kinsing malware. 11 sightings, last seen 2026-10-01.
Detection summary
- 61 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: KINSING (S0599)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Kinsing | Triage | 2026-03-09 00:14:40 | 2026-10-01 12:19:07 | malicious-activity | S0599 Kinsing |
| Kinsing | ThreatFox Abuse.ch | 2023-08-18 20:47:34 | 2023-08-18 21:17:05 | S0599 Kinsing |
Tags
elf.kinsing h2miner kinsing linux loaderSample information
- Filenames
- kinsing_aarch64, bot_aarch64
- MD5
da753ebcfe793614129fc11890acedbc- SHA-1
ee458e526125d60cc1a387b4163376be8e9bc689- SHA-256
c6fbd6896d162a12d9c900056781eb82f44649945808b7b009646b5397bcf6bf- SHA-512
e3a95222cc951db48eaa26dd5305c56b3475eb9c3a8e82625a5f3df3545ccd47d61f916f6efa326d00b3a3fa435a7079dd6b6f65e3d3fc6621b1b71d2273de6f- First indexed
- 2023-08-18 21:17:05
- Last updated
- 2026-10-01 12:59:25
Antivirus detections
| Engine | Detection |
|---|---|
| Lionic | Trojan.Linux.Agent.4!c |
| MicroWorld-eScan | Trojan.Linux.Generic.313682 |
| ALYac | Trojan.Linux.Generic.313682 |
| Cyren | E64/ABRisk.BLMV-5 |
| Symantec | Trojan.Gen.NPE |
| ESET-NOD32 | a variant of Linux/CoinMiner.QX |
| TrendMicro-HouseCall | Trojan.Linux.MALXMR.USELVH423 |
| Avast | Other:Malware-gen [Trj] |
| Kaspersky | HEUR:Trojan.Linux.Agent.hn |
| BitDefender | Trojan.Linux.Generic.313682 |
| Rising | Trojan.Kinsing/Linux!1.E19A (CLOUD) |
| Emsisoft | Trojan.Linux.Generic.313682 (B) |
| F-Secure | Malware.LINUX/CoinMiner.otikr |
| VIPRE | Trojan.Linux.Generic.313682 |
| TrendMicro | Trojan.Linux.MALXMR.USELVH423 |
| McAfee-GW-Edition | Artemis!Trojan |
| FireEye | Trojan.Linux.Generic.313682 |
| Sophos | Mal/Generic-S |
| GData | Trojan.Linux.Generic.313682 |
| Detected | |
| Avira | LINUX/CoinMiner.otikr |
| Antiy-AVL | Trojan/Linux.CoinMiner.qx |
| Microsoft | Trojan:Linux/Multiverze |
| Arcabit | Trojan.Linux.Generic.D4C952 |
| ZoneAlarm | HEUR:Trojan.Linux.Agent.hn |
| Cynet | Malicious (score: 99) |
| Tencent | Linux.Trojan.Agent.Azlw |
| MAX | malware (ai score=85) |
| Fortinet | Adware/Miner |
| AVG | Other:Malware-gen [Trj] |
| ALYac | Trojan.Linux.CoinMiner |
| AVG | ELF:Scanner-FA [Trj] |
| AhnLab-V3 | Trojan/Linux.Agent |
| Arcabit | Trojan.Generic.D22309C6 |
| Avast | ELF:Scanner-FA [Trj] |
| Avast-Mobile | ELF:Scanner-FA [Trj] |
| BitDefender | Trojan.Generic.35850694 |
| CTX | elf.trojan.generic |
| ClamAV | Unix.Malware.Scanner-10029862-0 |
| DrWeb | Linux.Siggen.6060 |
| Emsisoft | Trojan.Generic.35850694 (B) |
| FireEye | Trojan.Generic.35850694 |
| GData | Trojan.Generic.35850694 |
| Ikarus | Trojan.Linux.Generic |
| Jiangmin | Trojan.Linux.dso |
| Kingsoft | Linux.Trojan.Agent.hn |
| Lionic | Trojan.Linux.Scanner.4!c |
| MicroWorld-eScan | Trojan.Generic.35850694 |
| Microsoft | Trojan:Linux/SAgnt!MTB |
| NANO-Antivirus | Trojan.ElfArm64.CoinMiner.kfarwq |
| Rising | Trojan.Kinsing/Linux!1.E19A (CLASSIC) |
| Skyhigh | Linux/Kinsing.a |
| Symantec | Trojan Horse |
| Tencent | Risktool.Linux.Miner.lp |
| TrendMicro | TROJ_GEN.R002C0DKF24 |
| TrendMicro-HouseCall | TROJ_GEN.R002C0DKF24 |
| VIPRE | Trojan.Generic.35850694 |
| Zillya | Trojan.35850694.Android.1 |
| alibabacloud | Miner:Linux/CoinMiner.QX |
| huorong | HackTool/Linux.CoinMiner.d |
| CTX | elf.trojan.scanner |