Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_191333d8394582475727690afaa8f41a_cryptolocker

  • Size

    31KB

  • Sample

    240125-wax71abhh2

  • MD5

    191333d8394582475727690afaa8f41a

  • SHA1

    2e24a0c9e42891b839b0eea5a4c8f3556e853227

  • SHA256

    897d68acd781294c9c7fdb207d2b4369332988339771a76804cc42f3bbb40f4e

  • SHA512

    41c22dbd09aca953f7f3f974a6bd3d6ed6b1478ab4b1e913ecf8d83e2e8077434b49b6e3295aba554a9d8c7710aaa94a8cee6e1ef493863387307df492908111

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAMubA:bAvJCYOOvbRPDEgXRc+BA/bA

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_191333d8394582475727690afaa8f41a_cryptolocker

    • Size

      31KB

    • MD5

      191333d8394582475727690afaa8f41a

    • SHA1

      2e24a0c9e42891b839b0eea5a4c8f3556e853227

    • SHA256

      897d68acd781294c9c7fdb207d2b4369332988339771a76804cc42f3bbb40f4e

    • SHA512

      41c22dbd09aca953f7f3f974a6bd3d6ed6b1478ab4b1e913ecf8d83e2e8077434b49b6e3295aba554a9d8c7710aaa94a8cee6e1ef493863387307df492908111

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAMubA:bAvJCYOOvbRPDEgXRc+BA/bA

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks