General

  • Target

    PremiereCrack.7z

  • Size

    46KB

  • Sample

    210509-ca35q9xssa

  • MD5

    53a73cf77b460505724c029cb5f6d5f5

  • SHA1

    f4f9098f9a5370f53103b31e4a65581c4b8812a4

  • SHA256

    f09ef1790c19bf72849d278e2a759cd5a3f00421af372a2039fafed270bcdc93

  • SHA512

    5cda417d9bd87b4aae57b1b8e76f00a3892224df810f17f84b4b7e2235db01bfd02735a4a27ad1329cde2347a64b010460efee2a086870ceb729e40db6bb4871

Malware Config

Targets

    • Target

      PremiereCrack.exe

    • Size

      89KB

    • MD5

      24f89b42a9614bfbdb4c2bf97c0b0257

    • SHA1

      72081b8dafea8abf3cd042d424e9bd751e9e1121

    • SHA256

      0d2137d133179a2fbff7bf38a8125d4b74e9615aaa47b5f4a3056eccce7a8f6e

    • SHA512

      00efae478f575d9c55a225f43002fc28a9c9a4ad6785873f1cfdfe03a84d34a8adc65fb8e41a5c852b7faaf02ec8eb8a7f4d92663aa59d5b9a6a073f1e23817e

    • InfinityLock Ransomware

      Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

MITRE ATT&CK Enterprise v6

Tasks