Analysis
-
max time kernel
379s -
max time network
1560s -
platform
windows10_x64 -
resource
win10-en-20211104 -
submitted
14-11-2021 09:50
Static task
static1
Behavioral task
behavioral1
Sample
PremiereCrack.exe
Resource
win10-en-20211104
windows10_x64
0 signatures
0 seconds
General
-
Target
PremiereCrack.exe
-
Size
602KB
-
MD5
34fd3756e03a0fc6002b269412262f04
-
SHA1
c5f9c5edac33caddc0f170ce3cae385b3f04df87
-
SHA256
331d3332d59dced547bb96d913112cfd2de67f488c541c35fea78c66f3729965
-
SHA512
863a900185a819c45cd99390ee0477453c3637674dd37e6d3ef567519739d8ca45320caedc93125d6aaf95bb7814b24b6d16c726d70e90aca08b2ee83c0f7380
Score
10/10
Malware Config
Signatures
-
InfinityLock Ransomware
Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.
-
Modifies extensions of user files 8 IoCs
Ransomware generally changes the extension on encrypted files.
description ioc Process File opened for modification C:\Users\Admin\Pictures\ExpandPush.raw.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Users\Admin\Pictures\FormatPing.crw.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Users\Admin\Pictures\SaveCheckpoint.tif.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Users\Admin\Pictures\SkipSplit.crw.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Users\Admin\Pictures\SwitchStep.raw.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Users\Admin\Pictures\CompleteHide.tif.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Users\Admin\Pictures\ConvertToCompress.png.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Users\Admin\Pictures\DismountComplete.crw.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\ro-ro\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\go-mobile.png.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_thumbnailview_18.svg.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\plugin.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\uk-ua\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\index.html.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\css\main-selector.css.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\plugin.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\es-es\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\images\avatar.jpg.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files-select\js\plugin.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\plugin.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\compare.png.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\uk-ua\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\sat_logo_2x.png.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\hi_contrast\aic_file_icons_retina_thumb_highContrast_bow.png.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\fi-fi\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\arrow-right-pressed.gif.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ja-jp\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\x_2x.png.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\S_IlluEmptyStateCCFiles_280x192.svg.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\css\main-selector.css.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\arrow-up-pressed.gif.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\images\themes\dark\example_icons2x.png.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_removeme-default_18.svg.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\@1x\themes\dark\A12_Roundrect_White@1x.png.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\it-it\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\selector.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\themeless\accessibility_poster.jpg.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pl_135x40.svg.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Onix32.dll.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\pt-br\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\plugin.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\share_icons.png.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\tr-tr\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\en-ae\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\adobe_spinner.gif.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\tr-tr\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\css\main.css.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\nl-nl\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\plugins\rhp\exportpdfupsell-app-selector.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\ca-es\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ro-ro\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\review_shared.gif.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_filterselected-dark-down_32.svg.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\zh-cn\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-rdr-en_us.gif.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\fr-fr\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\he-il\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\nl-nl\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_link_18.svg.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\css\main.css.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_removeme-default_18.svg.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_gridview-hover.svg.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ko-kr\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\nl-nl\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\ja-jp\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\ui-strings.js.4EF1F2BDAA767F3DD34BC8BE769249553DA319FF82CDD64E3094A468DBB06077 PremiereCrack.exe -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 PremiereCrack.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString PremiereCrack.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4024 PremiereCrack.exe