General
- Target ccv.bin
- Size 224KB
- Sample221129-rrc6yabc5w
- SHA256 7bbfff4ecb5beaf20c8204be267776270daefb6eb0197c76649182350772162c
Score
10/10
Malware Config
Targets
-
- Target ccv.bin
- Size 224KB
- SHA256 7bbfff4ecb5beaf20c8204be267776270daefb6eb0197c76649182350772162c
Score10/10PLAY Ransomware, PlayCrypt
Ransomware family first seen in mid 2022.
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
Drops desktop.ini file(s)
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.