Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_23c9a9b3341332f20424508270cfeb91_cryptolocker

  • Size

    100KB

  • Sample

    240125-vytn2sbeh4

  • MD5

    23c9a9b3341332f20424508270cfeb91

  • SHA1

    342ecdf4b09abf2ab701a4ec46c1789fdcf6c302

  • SHA256

    911fbfd9379eab63dacabff197e62febdc37f6f0878d42dd8070e9b64fe3c20f

  • SHA512

    26c8595131406152f88893908b5e5a244787ef456345fa08799e536c3b8716177cdf7e9f4f3bef13f262a7d0b3a05a276614381180e358ad6cad8b6bbf370437

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjzUNojlEQ:i5nkFGMOtEvwDpjNbwQEIikgNyEQ

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_23c9a9b3341332f20424508270cfeb91_cryptolocker

    • Size

      100KB

    • MD5

      23c9a9b3341332f20424508270cfeb91

    • SHA1

      342ecdf4b09abf2ab701a4ec46c1789fdcf6c302

    • SHA256

      911fbfd9379eab63dacabff197e62febdc37f6f0878d42dd8070e9b64fe3c20f

    • SHA512

      26c8595131406152f88893908b5e5a244787ef456345fa08799e536c3b8716177cdf7e9f4f3bef13f262a7d0b3a05a276614381180e358ad6cad8b6bbf370437

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjzUNojlEQ:i5nkFGMOtEvwDpjNbwQEIikgNyEQ

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks