Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_7931c7a2457da7124da40c942d2aaf9f_cryptolocker

  • Size

    38KB

  • Sample

    240125-whmfgacbf2

  • MD5

    7931c7a2457da7124da40c942d2aaf9f

  • SHA1

    3b80cd57196649cd46ae44aa6cddd7ddc1b5c739

  • SHA256

    946b33e09f78d4e498539f7f3a21bcec0956f4ff5731451ddbacb7ff527252f5

  • SHA512

    aed9d26bde6ffd5d4fce70e11e821dfe9c4a758d818a4d75587610e5877b796a2d8d36d2548f97b3a9382a9d462812759fda2ada25f04f7dc414d7ca4c2db003

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlxur:b/yC4GyNM01GuQMNXw2PSjHPbSuYlC

Score
10/10
kinsingloader

Malware Config

Targets

    • Target

      2024-01-25_7931c7a2457da7124da40c942d2aaf9f_cryptolocker

    • Size

      38KB

    • MD5

      7931c7a2457da7124da40c942d2aaf9f

    • SHA1

      3b80cd57196649cd46ae44aa6cddd7ddc1b5c739

    • SHA256

      946b33e09f78d4e498539f7f3a21bcec0956f4ff5731451ddbacb7ff527252f5

    • SHA512

      aed9d26bde6ffd5d4fce70e11e821dfe9c4a758d818a4d75587610e5877b796a2d8d36d2548f97b3a9382a9d462812759fda2ada25f04f7dc414d7ca4c2db003

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlxur:b/yC4GyNM01GuQMNXw2PSjHPbSuYlC

    Score
    10/10
    kinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks