General
- Target SD.exe.bak
- Size 501KB
- Sample221129-rlwq4aga85
- SHA256 757524b09e5d4f2399172c4ac0f6996ec34dec90110542973d438d5370aff280
Score
10/10
Malware Config
Targets
-
- Target SD.exe.bak
- Size 501KB
- SHA256 757524b09e5d4f2399172c4ac0f6996ec34dec90110542973d438d5370aff280
Score10/10-
PLAY Ransomware, PlayCrypt
Ransomware family first seen in mid 2022.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.