General

  • Target

    123.exe

  • Size

    89KB

  • Sample

    210509-eg69dcgw62

  • MD5

    3822d0484ec81d615a0913c398ad1f83

  • SHA1

    b7bd3e90724189c7316b82a70ce85e0a91855089

  • SHA256

    27a1f89ce5a37815010c8411dddec85d5d66e81a957ad722fbd2dc64f99651c8

  • SHA512

    d103abe81ef9bba19a3f21c8a2742b6a6dad2d147bb440e81b1f17b1d0f67fc3dfa4c33c84ec8b7ca1b107fbd91535ee588d29bded615cff58685eb611665fe8

Malware Config

Targets

    • Target

      123.exe

    • Size

      89KB

    • MD5

      3822d0484ec81d615a0913c398ad1f83

    • SHA1

      b7bd3e90724189c7316b82a70ce85e0a91855089

    • SHA256

      27a1f89ce5a37815010c8411dddec85d5d66e81a957ad722fbd2dc64f99651c8

    • SHA512

      d103abe81ef9bba19a3f21c8a2742b6a6dad2d147bb440e81b1f17b1d0f67fc3dfa4c33c84ec8b7ca1b107fbd91535ee588d29bded615cff58685eb611665fe8

    • InfinityLock Ransomware

      Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

MITRE ATT&CK Enterprise v6

Tasks