Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_7521e3e9f6ad6fa66906b4d0d50b96a1_cryptolocker

  • Size

    121KB

  • Sample

    240125-wg4y5acbd8

  • MD5

    7521e3e9f6ad6fa66906b4d0d50b96a1

  • SHA1

    54ce844fc1252235bdb036c40883c27d2b34b4c0

  • SHA256

    a073fb995b995e8ebc9a1756c2e28b14d6042b45e9bfabccd4f0f9ed37616580

  • SHA512

    19fc1057a16bc7ceceda9eebdbfb4fdb339e7a3012fc9c7c6722c1baa5b9c8c4b223f22be78bfd6bb7d0b0004d6ade7a610996036d9091dddefd6f8782580a54

  • SSDEEP

    768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTK0:gUj+AIMOtEvwDpjNbwQEIPlemUhYa0

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_7521e3e9f6ad6fa66906b4d0d50b96a1_cryptolocker

    • Size

      121KB

    • MD5

      7521e3e9f6ad6fa66906b4d0d50b96a1

    • SHA1

      54ce844fc1252235bdb036c40883c27d2b34b4c0

    • SHA256

      a073fb995b995e8ebc9a1756c2e28b14d6042b45e9bfabccd4f0f9ed37616580

    • SHA512

      19fc1057a16bc7ceceda9eebdbfb4fdb339e7a3012fc9c7c6722c1baa5b9c8c4b223f22be78bfd6bb7d0b0004d6ade7a610996036d9091dddefd6f8782580a54

    • SSDEEP

      768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTK0:gUj+AIMOtEvwDpjNbwQEIPlemUhYa0

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks