Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_9b3f32a285f0924d1dfa7a5fa4a70034_cryptolocker

  • Size

    49KB

  • Sample

    240125-v442zacfeq

  • MD5

    9b3f32a285f0924d1dfa7a5fa4a70034

  • SHA1

    8f07927f84b2d97cee94099f339a42261c63f840

  • SHA256

    ca256ecb0e7ff2121f9349e15f220b5849e4baafc89b9aef11ca9d80514abcf7

  • SHA512

    74d60c199864e06be8cc5e7ea59305dfdc1142d4af92cb09d68514873fe85805ea496d0a72ccca9ffcb7be70278e1595282fb38148216be105af03ab465280d7

  • SSDEEP

    768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQ7suIlsw92KFXpQenhux:V6QFElP6n+gMQMOtEvwDpjeJQ7pojkRx

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_9b3f32a285f0924d1dfa7a5fa4a70034_cryptolocker

    • Size

      49KB

    • MD5

      9b3f32a285f0924d1dfa7a5fa4a70034

    • SHA1

      8f07927f84b2d97cee94099f339a42261c63f840

    • SHA256

      ca256ecb0e7ff2121f9349e15f220b5849e4baafc89b9aef11ca9d80514abcf7

    • SHA512

      74d60c199864e06be8cc5e7ea59305dfdc1142d4af92cb09d68514873fe85805ea496d0a72ccca9ffcb7be70278e1595282fb38148216be105af03ab465280d7

    • SSDEEP

      768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQ7suIlsw92KFXpQenhux:V6QFElP6n+gMQMOtEvwDpjeJQ7pojkRx

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks