General

  • Target

    InfinityCrypt.zip

  • Size

    33KB

  • Sample

    230405-3v3rjsab86

  • MD5

    5569bfe4f06724dd750c2a4690b79ba0

  • SHA1

    05414c7d5dacf43370ab451d28d4ac27bdcabf22

  • SHA256

    cfa4daab47e6eb546323d4c976261aefba3947b4cce1a655dde9d9d6d725b527

  • SHA512

    775bd600625dc5d293cfebb208d7dc9b506b08dd0da22124a7a69fb435756c2a309cbd3d813fc78543fd9bae7e9b286a5bd83a956859c05f5656daa96fcc2165

  • SSDEEP

    768:xaTvxO0nJFcoYFY5Hn8tuWRHkD+unrGRcd0zOF9MzKh8yK4ZJy9ELob8a:EtOoJFSzt5BiGGmObB04Z09cobl

Malware Config

Targets

    • Target

      InfinityCrypt.zip

    • Size

      33KB

    • MD5

      5569bfe4f06724dd750c2a4690b79ba0

    • SHA1

      05414c7d5dacf43370ab451d28d4ac27bdcabf22

    • SHA256

      cfa4daab47e6eb546323d4c976261aefba3947b4cce1a655dde9d9d6d725b527

    • SHA512

      775bd600625dc5d293cfebb208d7dc9b506b08dd0da22124a7a69fb435756c2a309cbd3d813fc78543fd9bae7e9b286a5bd83a956859c05f5656daa96fcc2165

    • SSDEEP

      768:xaTvxO0nJFcoYFY5Hn8tuWRHkD+unrGRcd0zOF9MzKh8yK4ZJy9ELob8a:EtOoJFSzt5BiGGmObB04Z09cobl

    • InfinityLock Ransomware

      Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks