Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_444bd49b2caa13206faacbd1871ed984_cryptolocker

  • Size

    39KB

  • Sample

    240125-v1eb5scedm

  • MD5

    444bd49b2caa13206faacbd1871ed984

  • SHA1

    d66856198d20cac4f7af2699bc073f6ae187ac70

  • SHA256

    7d1b9014d1057d105a9ad214332b5cafb0e419c788496f411bcbc96bb2218e2e

  • SHA512

    329c4e31aeb42a0b7721b974920ee255b3e6c4ba349f06d0fa5d2f841fe8d73c572c4c5484c873c6f4dee5c69f0cdaf99065a5870ff7895a447d18519819cb20

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQL3bTB:ZzFbxmLPWQMOtEvwDpjLeU3J

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_444bd49b2caa13206faacbd1871ed984_cryptolocker

    • Size

      39KB

    • MD5

      444bd49b2caa13206faacbd1871ed984

    • SHA1

      d66856198d20cac4f7af2699bc073f6ae187ac70

    • SHA256

      7d1b9014d1057d105a9ad214332b5cafb0e419c788496f411bcbc96bb2218e2e

    • SHA512

      329c4e31aeb42a0b7721b974920ee255b3e6c4ba349f06d0fa5d2f841fe8d73c572c4c5484c873c6f4dee5c69f0cdaf99065a5870ff7895a447d18519819cb20

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQL3bTB:ZzFbxmLPWQMOtEvwDpjLeU3J

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks