Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_df20d6d2e2adb81020a282ee6d11c3eb_cryptolocker

  • Size

    122KB

  • Sample

    240125-ta64ssbabm

  • MD5

    df20d6d2e2adb81020a282ee6d11c3eb

  • SHA1

    7065453d72a6e4ebd5b8535fc76c18a92377cdf8

  • SHA256

    a4f531f4b4e2dd1f985062afc1842223147355ce3593984aeacfbdac7210cc0b

  • SHA512

    65d1979d460dc2233e77b450cfa756dfdd4a70900542b1d1f1a36e113647925f8f23be657f5dcaa25df03fc304cdcb2a7ac6f529b942a0497031b62aa3a99d34

  • SSDEEP

    768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTZ+m0:gUj+AIMOtEvwDpjNbwQEIPlemUhYpO

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_df20d6d2e2adb81020a282ee6d11c3eb_cryptolocker

    • Size

      122KB

    • MD5

      df20d6d2e2adb81020a282ee6d11c3eb

    • SHA1

      7065453d72a6e4ebd5b8535fc76c18a92377cdf8

    • SHA256

      a4f531f4b4e2dd1f985062afc1842223147355ce3593984aeacfbdac7210cc0b

    • SHA512

      65d1979d460dc2233e77b450cfa756dfdd4a70900542b1d1f1a36e113647925f8f23be657f5dcaa25df03fc304cdcb2a7ac6f529b942a0497031b62aa3a99d34

    • SSDEEP

      768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTZ+m0:gUj+AIMOtEvwDpjNbwQEIPlemUhYpO

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks