Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_ef82d30cbd5d823168cc1ae928547faf_cryptolocker

  • Size

    50KB

  • Sample

    240125-v9edhabhd7

  • MD5

    ef82d30cbd5d823168cc1ae928547faf

  • SHA1

    d23d27b66660546c8108debcd6cb835043a9e828

  • SHA256

    b1767aa87b0feb95b533470a89c309da05461467700d646de151df56eaa5d89d

  • SHA512

    a1cf52d1a6be7ce7a6f36811ad1c947615f27ff8913ddd10e31cab424157afe903b4f9aed9bd01aff01a187d6cae9fd923960f2534a86f4e1494333dc6705020

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRd:79mqyNhQMOtEvwDpjBxe8TpXRd

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_ef82d30cbd5d823168cc1ae928547faf_cryptolocker

    • Size

      50KB

    • MD5

      ef82d30cbd5d823168cc1ae928547faf

    • SHA1

      d23d27b66660546c8108debcd6cb835043a9e828

    • SHA256

      b1767aa87b0feb95b533470a89c309da05461467700d646de151df56eaa5d89d

    • SHA512

      a1cf52d1a6be7ce7a6f36811ad1c947615f27ff8913ddd10e31cab424157afe903b4f9aed9bd01aff01a187d6cae9fd923960f2534a86f4e1494333dc6705020

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRd:79mqyNhQMOtEvwDpjBxe8TpXRd

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks