Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_e532c7ba364526f012989c5f2a7166d0_cryptolocker

  • Size

    31KB

  • Sample

    240125-v8t3kabhc6

  • MD5

    e532c7ba364526f012989c5f2a7166d0

  • SHA1

    05c0bc1f599b0ec8a1fbe9d5e3b0446c728b9c48

  • SHA256

    83b8c1fb55cec16c3576078b6443e9b2848b444303d75fa181a432c0f9d7cd27

  • SHA512

    a8841a06c3ca70a0909cf9c0711e46e2a9e0573db8f3c94a369f97b7779f7a3678dfd44f8c49f2de77822e0d9d11863423ef08a009668ea28ce3aa3c2a7d9066

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9Jm:bAvJCYOOvbRPDEgXRcuM9U

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_e532c7ba364526f012989c5f2a7166d0_cryptolocker

    • Size

      31KB

    • MD5

      e532c7ba364526f012989c5f2a7166d0

    • SHA1

      05c0bc1f599b0ec8a1fbe9d5e3b0446c728b9c48

    • SHA256

      83b8c1fb55cec16c3576078b6443e9b2848b444303d75fa181a432c0f9d7cd27

    • SHA512

      a8841a06c3ca70a0909cf9c0711e46e2a9e0573db8f3c94a369f97b7779f7a3678dfd44f8c49f2de77822e0d9d11863423ef08a009668ea28ce3aa3c2a7d9066

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9Jm:bAvJCYOOvbRPDEgXRcuM9U

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks