Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_99127a896db823ae154d7d8f7350087f_cryptolocker

  • Size

    100KB

  • Sample

    240125-s6tynshhh5

  • MD5

    99127a896db823ae154d7d8f7350087f

  • SHA1

    aedb387ba28de0238a72aec5ad47bfef062dd7b0

  • SHA256

    9bd68c5b248f233db718a408c0dd6476ff1c690007868d6ac48c1f95444b9326

  • SHA512

    88630c3c13734a121e761b79eb84a0a68838d1b580e7c8b9d673b2883efbb3c8396f8e83b093bde72c093376d577f57265f701b9f5c9c898ba5c05c75d451f2b

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjzUNojlEb:i5nkFGMOtEvwDpjNbwQEIikgNyEb

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_99127a896db823ae154d7d8f7350087f_cryptolocker

    • Size

      100KB

    • MD5

      99127a896db823ae154d7d8f7350087f

    • SHA1

      aedb387ba28de0238a72aec5ad47bfef062dd7b0

    • SHA256

      9bd68c5b248f233db718a408c0dd6476ff1c690007868d6ac48c1f95444b9326

    • SHA512

      88630c3c13734a121e761b79eb84a0a68838d1b580e7c8b9d673b2883efbb3c8396f8e83b093bde72c093376d577f57265f701b9f5c9c898ba5c05c75d451f2b

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjzUNojlEb:i5nkFGMOtEvwDpjNbwQEIikgNyEb

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks