Overview

overview

10

Static

static

123.exe

windows7_x64

10

123.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    123.exe

  • Size

    89KB

  • Sample

    210509-eg69dcgw62

  • MD5

    3822d0484ec81d615a0913c398ad1f83

  • SHA1

    b7bd3e90724189c7316b82a70ce85e0a91855089

  • SHA256

    27a1f89ce5a37815010c8411dddec85d5d66e81a957ad722fbd2dc64f99651c8

  • SHA512

    d103abe81ef9bba19a3f21c8a2742b6a6dad2d147bb440e81b1f17b1d0f67fc3dfa4c33c84ec8b7ca1b107fbd91535ee588d29bded615cff58685eb611665fe8

Score
10/10
infinitylockransomware

Malware Config

Targets

    • Target

      123.exe

    • Size

      89KB

    • MD5

      3822d0484ec81d615a0913c398ad1f83

    • SHA1

      b7bd3e90724189c7316b82a70ce85e0a91855089

    • SHA256

      27a1f89ce5a37815010c8411dddec85d5d66e81a957ad722fbd2dc64f99651c8

    • SHA512

      d103abe81ef9bba19a3f21c8a2742b6a6dad2d147bb440e81b1f17b1d0f67fc3dfa4c33c84ec8b7ca1b107fbd91535ee588d29bded615cff58685eb611665fe8

    Score
    10/10
    infinitylockransomware

    • InfinityLock Ransomware

      Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.

      ransomwareinfinitylock

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks