General
-
Target
123.exe
-
Size
89KB
-
Sample
210509-eg69dcgw62
-
MD5
3822d0484ec81d615a0913c398ad1f83
-
SHA1
b7bd3e90724189c7316b82a70ce85e0a91855089
-
SHA256
27a1f89ce5a37815010c8411dddec85d5d66e81a957ad722fbd2dc64f99651c8
-
SHA512
d103abe81ef9bba19a3f21c8a2742b6a6dad2d147bb440e81b1f17b1d0f67fc3dfa4c33c84ec8b7ca1b107fbd91535ee588d29bded615cff58685eb611665fe8
Static task
static1
Behavioral task
behavioral1
Sample
123.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
123.exe
Resource
win10v20210410
Malware Config
Targets
-
-
Target
123.exe
-
Size
89KB
-
MD5
3822d0484ec81d615a0913c398ad1f83
-
SHA1
b7bd3e90724189c7316b82a70ce85e0a91855089
-
SHA256
27a1f89ce5a37815010c8411dddec85d5d66e81a957ad722fbd2dc64f99651c8
-
SHA512
d103abe81ef9bba19a3f21c8a2742b6a6dad2d147bb440e81b1f17b1d0f67fc3dfa4c33c84ec8b7ca1b107fbd91535ee588d29bded615cff58685eb611665fe8
Score10/10-
InfinityLock Ransomware
Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-