Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_df53780ac07f6b46677077c06253f744_cryptolocker

  • Size

    37KB

  • Sample

    240125-ta886aaag9

  • MD5

    df53780ac07f6b46677077c06253f744

  • SHA1

    b408757a174615381ada8c4046fcc99ef175a09b

  • SHA256

    11e26bfbf08684897cebed3e3c094c9abcccdcaa9361cccdaca4783ddc0c0077

  • SHA512

    8f7e6b142fe790602a1cef8125afd8b291f070999a19c8096b8e88820dd3f811748a43c7032df62cfcac0048e17f7b16a26436c7c212c3c614cfdebab9153c17

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcf7:X6QFElP6n+gJQMOtEvwDpjBsYK67

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_df53780ac07f6b46677077c06253f744_cryptolocker

    • Size

      37KB

    • MD5

      df53780ac07f6b46677077c06253f744

    • SHA1

      b408757a174615381ada8c4046fcc99ef175a09b

    • SHA256

      11e26bfbf08684897cebed3e3c094c9abcccdcaa9361cccdaca4783ddc0c0077

    • SHA512

      8f7e6b142fe790602a1cef8125afd8b291f070999a19c8096b8e88820dd3f811748a43c7032df62cfcac0048e17f7b16a26436c7c212c3c614cfdebab9153c17

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcf7:X6QFElP6n+gJQMOtEvwDpjBsYK67

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks