General

  • Target

    321.exe

  • Size

    89KB

  • Sample

    210509-3ztfmq9qzj

  • MD5

    24f89b42a9614bfbdb4c2bf97c0b0257

  • SHA1

    72081b8dafea8abf3cd042d424e9bd751e9e1121

  • SHA256

    0d2137d133179a2fbff7bf38a8125d4b74e9615aaa47b5f4a3056eccce7a8f6e

  • SHA512

    00efae478f575d9c55a225f43002fc28a9c9a4ad6785873f1cfdfe03a84d34a8adc65fb8e41a5c852b7faaf02ec8eb8a7f4d92663aa59d5b9a6a073f1e23817e

Malware Config

Targets

    • Target

      321.exe

    • Size

      89KB

    • MD5

      24f89b42a9614bfbdb4c2bf97c0b0257

    • SHA1

      72081b8dafea8abf3cd042d424e9bd751e9e1121

    • SHA256

      0d2137d133179a2fbff7bf38a8125d4b74e9615aaa47b5f4a3056eccce7a8f6e

    • SHA512

      00efae478f575d9c55a225f43002fc28a9c9a4ad6785873f1cfdfe03a84d34a8adc65fb8e41a5c852b7faaf02ec8eb8a7f4d92663aa59d5b9a6a073f1e23817e

    • InfinityLock Ransomware

      Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

MITRE ATT&CK Enterprise v6

Tasks