Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-25_f5d93735820aaefb54e4c8976be5a9db_cryptolocker

  • Size

    44KB

  • Sample

    240125-v9qrjacghm

  • MD5

    f5d93735820aaefb54e4c8976be5a9db

  • SHA1

    0042f882e9552396087fd7241e0f7eea8ac88465

  • SHA256

    2879ac408dfd5b4d625cece0ebf3f99bf2300ebbc513665f21f08ff23a7e1ada

  • SHA512

    9287a9f13f63475b4dd05df2958e6b309811991855d5fd732ab89bbeb4edb721d0a2638607e322c26a24fb8305ab05372769acf8bec875396e4b1bcfcfb448ed

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuT:bIDOw9a0Dwo3P1ojvUSD4PInK

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_f5d93735820aaefb54e4c8976be5a9db_cryptolocker

    • Size

      44KB

    • MD5

      f5d93735820aaefb54e4c8976be5a9db

    • SHA1

      0042f882e9552396087fd7241e0f7eea8ac88465

    • SHA256

      2879ac408dfd5b4d625cece0ebf3f99bf2300ebbc513665f21f08ff23a7e1ada

    • SHA512

      9287a9f13f63475b4dd05df2958e6b309811991855d5fd732ab89bbeb4edb721d0a2638607e322c26a24fb8305ab05372769acf8bec875396e4b1bcfcfb448ed

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuT:bIDOw9a0Dwo3P1ojvUSD4PInK

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks