Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_7b4a875ab88f62fd28eec2985a0d7a63_cryptolocker

  • Size

    122KB

  • Sample

    240125-v3r11sbga2

  • MD5

    7b4a875ab88f62fd28eec2985a0d7a63

  • SHA1

    ef40e8ade1521c5f9e68d7ac50f7ef8055f68b5d

  • SHA256

    768ec8c6fe1bc71cc496c618cfdb12292237a24b90f32d569792000c7fe7fb11

  • SHA512

    4d61d5fe5bcb606d779624b671075b593062b6636f6dc4b86dae43343a5fa4c029fd267d2a68c563dcfa3b439cbbeb0ee47bac9b00e3f09c5ad9321571e76798

  • SSDEEP

    768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTZ+mjP:gUj+AIMOtEvwDpjNbwQEIPlemUhYpVa4

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_7b4a875ab88f62fd28eec2985a0d7a63_cryptolocker

    • Size

      122KB

    • MD5

      7b4a875ab88f62fd28eec2985a0d7a63

    • SHA1

      ef40e8ade1521c5f9e68d7ac50f7ef8055f68b5d

    • SHA256

      768ec8c6fe1bc71cc496c618cfdb12292237a24b90f32d569792000c7fe7fb11

    • SHA512

      4d61d5fe5bcb606d779624b671075b593062b6636f6dc4b86dae43343a5fa4c029fd267d2a68c563dcfa3b439cbbeb0ee47bac9b00e3f09c5ad9321571e76798

    • SSDEEP

      768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTZ+mjP:gUj+AIMOtEvwDpjNbwQEIPlemUhYpVa4

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks