Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_e7ce3e59b8de1c6a2ef795c932db91b2_cryptolocker

  • Size

    59KB

  • Sample

    240125-v8xhpacgfl

  • MD5

    e7ce3e59b8de1c6a2ef795c932db91b2

  • SHA1

    317fd58e791517774733798e0ca0530b72c0e5dd

  • SHA256

    2de6e94a3b2397740b5024c2cb8f5582592b824cca5a8e63ef7d6644a85b725d

  • SHA512

    b076b5b9657fb3efcddf6de459f39a11f30a14547899655fd641f4d4643fa09b3244e980d91557a8518989ce9019189b6a18f9e4f90eff907aefa61d72036679

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xn:X6a+SOtEvwDpjBrOZ

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_e7ce3e59b8de1c6a2ef795c932db91b2_cryptolocker

    • Size

      59KB

    • MD5

      e7ce3e59b8de1c6a2ef795c932db91b2

    • SHA1

      317fd58e791517774733798e0ca0530b72c0e5dd

    • SHA256

      2de6e94a3b2397740b5024c2cb8f5582592b824cca5a8e63ef7d6644a85b725d

    • SHA512

      b076b5b9657fb3efcddf6de459f39a11f30a14547899655fd641f4d4643fa09b3244e980d91557a8518989ce9019189b6a18f9e4f90eff907aefa61d72036679

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xn:X6a+SOtEvwDpjBrOZ

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks