Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_83815ae6e673da0594adb8baa378e476_cryptolocker

  • Size

    38KB

  • Sample

    240125-v38zjacfar

  • MD5

    83815ae6e673da0594adb8baa378e476

  • SHA1

    97e552b4a3c8b38ffadc6da141f10bb368fdf926

  • SHA256

    64b60550791a0b5e64d7b528aed4c05dcd9ea0641197c2bd31f49dce128cd0e2

  • SHA512

    71b6d3806fd5a5e064f22ccdfea19fd351d6603f2c72a463e560191f12c2aeaf225997eea389ece6acf8189263dd912847ecfa135ec3fe483e45d1c0095f8bed

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8Pu:bIDOw9a0Dwo3P1ojvUSDhm

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_83815ae6e673da0594adb8baa378e476_cryptolocker

    • Size

      38KB

    • MD5

      83815ae6e673da0594adb8baa378e476

    • SHA1

      97e552b4a3c8b38ffadc6da141f10bb368fdf926

    • SHA256

      64b60550791a0b5e64d7b528aed4c05dcd9ea0641197c2bd31f49dce128cd0e2

    • SHA512

      71b6d3806fd5a5e064f22ccdfea19fd351d6603f2c72a463e560191f12c2aeaf225997eea389ece6acf8189263dd912847ecfa135ec3fe483e45d1c0095f8bed

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8Pu:bIDOw9a0Dwo3P1ojvUSDhm

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks