Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_5af23067b325980de6dda8aed7fc678a_cryptolocker

  • Size

    63KB

  • Sample

    240125-wfbk7adadq

  • MD5

    5af23067b325980de6dda8aed7fc678a

  • SHA1

    8a6113eef6a3c9ec476dbc5e1ae6ce1b85f77789

  • SHA256

    64ce0d56f00643d26eb19b585406ef679f8710adbb3f735b917d3f5f1732f5ee

  • SHA512

    7cb6f200d1fdbf5504496069bdb50561f9edfd14422980d27527216f8396b0d09f5b56338ea8e1c43b2085571f4b7b86ef1b7aa4d1018694bb94dde88160ef4f

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDSA96:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7Q

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_5af23067b325980de6dda8aed7fc678a_cryptolocker

    • Size

      63KB

    • MD5

      5af23067b325980de6dda8aed7fc678a

    • SHA1

      8a6113eef6a3c9ec476dbc5e1ae6ce1b85f77789

    • SHA256

      64ce0d56f00643d26eb19b585406ef679f8710adbb3f735b917d3f5f1732f5ee

    • SHA512

      7cb6f200d1fdbf5504496069bdb50561f9edfd14422980d27527216f8396b0d09f5b56338ea8e1c43b2085571f4b7b86ef1b7aa4d1018694bb94dde88160ef4f

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDSA96:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7Q

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks