Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_1c8a2df1bd5b64f24ec54b8d52148f0e_cryptolocker

  • Size

    78KB

  • Sample

    240125-tyxv2aafd7

  • MD5

    1c8a2df1bd5b64f24ec54b8d52148f0e

  • SHA1

    96f9bfffa9d32160ef9117f352a125d5878cba5f

  • SHA256

    2588844776c1154bedec891589c1f5909dbc734771acedfcd286e984ed06224c

  • SHA512

    6ad7f123bd57d37b6623a6d5e16835c8e800286c55dde79e7bf147fbc98c7ac4fd2622e15d238331386c83278faeced0092e6995066007fa6f8e389b16d6de4c

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIufLR:vCjsIOtEvwDpj5H9YvQd2h

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_1c8a2df1bd5b64f24ec54b8d52148f0e_cryptolocker

    • Size

      78KB

    • MD5

      1c8a2df1bd5b64f24ec54b8d52148f0e

    • SHA1

      96f9bfffa9d32160ef9117f352a125d5878cba5f

    • SHA256

      2588844776c1154bedec891589c1f5909dbc734771acedfcd286e984ed06224c

    • SHA512

      6ad7f123bd57d37b6623a6d5e16835c8e800286c55dde79e7bf147fbc98c7ac4fd2622e15d238331386c83278faeced0092e6995066007fa6f8e389b16d6de4c

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIufLR:vCjsIOtEvwDpj5H9YvQd2h

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks