Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_6a2dc81df197622c4e2317495d8799f0_cryptolocker

  • Size

    39KB

  • Sample

    240125-v3bzssbfg8

  • MD5

    6a2dc81df197622c4e2317495d8799f0

  • SHA1

    98e8679cdeff0bd8f20e9cfff53c109f3004dc56

  • SHA256

    b45a76b06f2cb7609fa32ef8c7a6c28afcaefa121db01be2a5cdb666dfa18b19

  • SHA512

    f4a7915198d39886a2fe03822918b027b70ffa841112a0b12c7294049344f25a8f2c329889c56d17f544e026f55b343d3ca1446e5f4405c48b29964e21fa0c49

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKG:bIDOw9a0Dwo3P1ojvUSDhY

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_6a2dc81df197622c4e2317495d8799f0_cryptolocker

    • Size

      39KB

    • MD5

      6a2dc81df197622c4e2317495d8799f0

    • SHA1

      98e8679cdeff0bd8f20e9cfff53c109f3004dc56

    • SHA256

      b45a76b06f2cb7609fa32ef8c7a6c28afcaefa121db01be2a5cdb666dfa18b19

    • SHA512

      f4a7915198d39886a2fe03822918b027b70ffa841112a0b12c7294049344f25a8f2c329889c56d17f544e026f55b343d3ca1446e5f4405c48b29964e21fa0c49

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKG:bIDOw9a0Dwo3P1ojvUSDhY

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks