Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_450601f8359a2cee2c55c38f7cc23e7f_cryptolocker

  • Size

    50KB

  • Sample

    240125-v1gr9sbfc5

  • MD5

    450601f8359a2cee2c55c38f7cc23e7f

  • SHA1

    96a0fbacdc1c2a8220340093fd71609ae8697e97

  • SHA256

    1fe8745e4faedfd8b0b0fd33183ab826c0ff94b2b44e937f3c2d883fb39bb028

  • SHA512

    61c2ffea1870c23b46a6018659dac943912327ae0460abe833e84389abb75f72d22fce54d5ea5fe917554cb3b532b70b96b758921e4e80c96da83fac6e164623

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIR2:79mqyNhQMOtEvwDpjBxe8TpXR2

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_450601f8359a2cee2c55c38f7cc23e7f_cryptolocker

    • Size

      50KB

    • MD5

      450601f8359a2cee2c55c38f7cc23e7f

    • SHA1

      96a0fbacdc1c2a8220340093fd71609ae8697e97

    • SHA256

      1fe8745e4faedfd8b0b0fd33183ab826c0ff94b2b44e937f3c2d883fb39bb028

    • SHA512

      61c2ffea1870c23b46a6018659dac943912327ae0460abe833e84389abb75f72d22fce54d5ea5fe917554cb3b532b70b96b758921e4e80c96da83fac6e164623

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIR2:79mqyNhQMOtEvwDpjBxe8TpXR2

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks