General

  • Target

    2024-01-25_d4c650239bc932a6eb4b40430175ad77_cryptolocker

  • Size

    39KB

  • Sample

    240125-v7n5xscgcp

  • MD5

    d4c650239bc932a6eb4b40430175ad77

  • SHA1

    85ae055d03c90df94cb4f665b95f151c5e9dd9a3

  • SHA256

    01106d5ec49f56920729252a625cb7787347acb63963b2c52efb07375962d9fa

  • SHA512

    5e6a506b2a9e4b0a21dd17e7e2e5abb29f6e01f5920874c86bd4b88b083e5aaf54b88f57299b8396e41054f712860d07e7853e7da17125d920989be815e14ac8

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKm:bIDOw9a0Dwo3P1ojvUSDh4

Score
10/10

Malware Config

Targets

    • Target

      2024-01-25_d4c650239bc932a6eb4b40430175ad77_cryptolocker

    • Size

      39KB

    • MD5

      d4c650239bc932a6eb4b40430175ad77

    • SHA1

      85ae055d03c90df94cb4f665b95f151c5e9dd9a3

    • SHA256

      01106d5ec49f56920729252a625cb7787347acb63963b2c52efb07375962d9fa

    • SHA512

      5e6a506b2a9e4b0a21dd17e7e2e5abb29f6e01f5920874c86bd4b88b083e5aaf54b88f57299b8396e41054f712860d07e7853e7da17125d920989be815e14ac8

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKm:bIDOw9a0Dwo3P1ojvUSDh4

    Score
    10/10
    • Kinsing

      Kinsing is a loader written in Golang.

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks